On Wed, 2005-03-16 at 08:20 -0500, Stephen Smalley wrote:
> One question is whether setfiles -c
> should only validate the base file_contexts configuration (which no
> longer contains the home directory entries at all).

I don't see a good alternative, really. The home directory stuff is entirely dynamic and outside policy build.

Perhaps though genhomedircon itself could run setfiles -c though on e.g. file_contexts.homedir.tmp before renaming it to file_contexts.homedir.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.