Research
.
Skip Search Box

SELinux Mailing List

Re: [RFC][PATCH] Coalesce setfiles and restorecon into a single program

From: Russell Coker <russell_at_coker.com.au>
Date: Wed, 9 May 2007 10:51:33 +1000


On Wednesday 09 May 2007 01:34, Stephen Smalley <sds@tycho.nsa.gov> wrote:
> Ok.  Does anyone have any comments on the policy issue for setfiles vs.
> restorecon?  Should we just collapse restorecon_t and restorecon_exec_t
> down to typealiases for setfiles_t and setfiles_exec_t for
> compatibility?  Or do we need to keep them separated?  In the past, some
> people have suggested that restorecon is "safer" since it doesn't let
> the caller specify the file contexts file, but I tend to view that as
> illusory.

It makes sense to me, both collapsing the domains and merging the two programs.

-- 
russell@coker.com.au
http://etbe.coker.com.au/          My Blog

http://www.coker.com.au/sponsorship.html Sponsoring Free Software development



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Wed 9 May 2007 - 05:06:12 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service