Research
Skip Research Menus
Research MenuSecurity Enhanced Linux What's New Frequently Asked Questions Background Documents License Download Participating Mail List Archives Remaining Work Contributors Related Work Press Releases Information Assurance Research NIARL In-house Research Areas Mathematical Sciences Program Sabbaticals Computer & Information Sciences Research Technology Transfer Advanced Computing Advanced Mathematics Communications & Networking Information Processing Microelectronics Other Technologies Technology Fact Sheets Publications Related Links |
SELinux Mailing ListRe: Added is_context_configurable function
From: Colin Walters <walters_at_redhat.com>
Date: Tue, 11 Jan 2005 17:25:49 -0500
> This might be a conflict between strict and relaxed policy. I am Now, part of this problem is that we're asking users to run "fixfiles relabel" so often. This is really a quite drastic measure, and we should be solving some of these cases automatically. For example, when PostgreSQL was added to the targeted policy, or when we move files around between FC3 and FC4, and users want to upgrade. One approach here might be to have an idea of file system label "versions". Let's call the contexts in the current rawhide to be version 0. This version is stored in /.label_version. Then let's say we add postgres, and we need to ensure that it's labeled correctly. We call this version 1. Inside the postinst, we have code like this: # Increase this on every incompatible change to file_contexts curver=1
fsver=$(cat /.label_version)
Then later, we move the dhcpd files around, so we just suffix this code:
if test $fsver -lt 2; then
etc. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.Received on Tue 11 Jan 2005 - 17:26:02 EST |
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |