Re: issue on 'fixfiles relabel'

[Park Lee]

On Thu, 03 Jun 2004 10:29:17, Stephen Smalley wrote:
> The policy package installs a copy of the file_contexts file to
> /etc/security/selinux so that it is available for use by fixfiles,
> setfiles, or restorecon even if policy sources is not available. 
But in <<Fedora Core 2 SELinux FAQ>>,there is one statement:
>  You will need to have the policy-sources package 
>  installed to use setfiles. 
 
Then, If policy package installs a copy of the file_contexts file to
/etc/security/selinux, is it necessary to install policy-sources
package in order to use setfiles? 
 
Thanks.
 
Best regards,
Park Lee
 

		
---------------------------------
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!

issue on 'fixfiles relabel'

[Stephen Smalley]

On Fri, 2004-08-13 at 11:26, Park Lee wrote:
>  On Thu, 03 Jun 2004 10:29:17, Stephen Smalley wrote:
>  >The policy package installs a copy of the file_contexts file to
>  >/etc/security/selinux so that it is available for use by fixfiles,
>  >setfiles, or restorecon even if policy sources is not available.
>  But in <<Fedora Core 2 SELinux FAQ>>,there is one statement:
>  > You will need to have the policy-sources package 
>  > installed to use setfiles.
>   
>  Then, If policy package installs a copy of the file_contexts file to
>  /etc/security/selinux, is it necessary to install policy-sources
>  package in order to use setfiles?  
No, policy-sources is not required to use setfiles; you can apply
setfiles to the installed file_contexts configuration file (and fixfiles
is just a script that runs setfiles on it).  Bug in the FAQ, please
bugzilla it.

-- 
Stephen Smalley <sds(a)epoch.ncsc.mil&gt;
National Security Agency

issue on 'fixfiles relabel'

[Karsten Wade]

On Fri, 2004-08-13 at 10:49, Stephen Smalley wrote:
>  On Fri, 2004-08-13 at 11:26, Park Lee wrote:
>  > On Thu, 03 Jun 2004 10:29:17, Stephen Smalley wrote:
>  > >The policy package installs a copy of the file_contexts file to
>  > >/etc/security/selinux so that it is available for use by fixfiles,
>  > >setfiles, or restorecon even if policy sources is not available.
>  > But in <<Fedora Core 2 SELinux FAQ>>,there is one statement:
>  > > You will need to have the policy-sources package 
>  > > installed to use setfiles.
>  >  
>  > Then, If policy package installs a copy of the file_contexts file to
>  > /etc/security/selinux, is it necessary to install policy-sources
>  > package in order to use setfiles? 
>  
>  No, policy-sources is not required to use setfiles; you can apply
>  setfiles to the installed file_contexts configuration file (and fixfiles
>  is just a script that runs setfiles on it).  Bug in the FAQ, please
>  bugzilla it. 
I'm including this update in the FAQ update (1.2-8), along with several
others.  The FC2 SELinux FAQ should then be current.

I'm working on an FC3test1 FAQ, as there have been some noteworthy
changes since FC2.

- Karsten
-- 
Karsten Wade, RHCE, Tech Writer
a lemon is just a melon in disguise
http://people.redhat.com/kwade/
gpg fingerprint: 2680 DBFD D968 3141 0115  5F1B D992 0E06 AD0E 0C41