RE: the labeling procedure

[Steve Brueckner]

Stephen Smalley wrote:
> If you want to apply the same contexts, you can use setfiles -r. But
> note that there can be an advantage to using separate types on the
> chroot'd environment, and then not allowing any access by that
> process' domain to the base types used on the real filesystem.
>
> Any chance you can update to FC4?

I've got to release a beta this week so I'm sticking with FC3 at the moment.
I'll certainly upgrade for the next version.

I don't see the -r option in man setfiles.  Is it a new option in FC4?

the labeling procedure

[Stephen Smalley]

On Mon, 2005-06-27 at 14:07 -0400, Steve Brueckner wrote:
> I've got to release a beta this week so I'm sticking with FC3 at the moment.
> I'll certainly upgrade for the next version.
>
> I don't see the -r option in man setfiles.  Is it a new option in FC4?

No, never trust the documentation.

/usr/sbin/setfiles -r /path/to/chroot /path/to/file_contexts /path/to/chroot