upgrade of selinux-policy-targeted doing recursive restorecon on NFS mounts a bad idea

[Jason Vas Dias]

I'm now doing an upgrade to 
selinux-policy-targeted-1.17.30-2.83 on FC3,
and it seems to be doing a recursive restorecon
on all the NFS mounts on the system - including
/home/boston, /mnt/redhat, etc.

I don't think this is a good idea at all! 
This single update of selinux-policy-targeted
is probably going to take all day, and I hope
the restorecon on NFS mounts as root is not 
going to harm other people's mounts of shared
NFS systems like /home/boston and  /mnt/redhat !

Restorecon in recursive mode should ignore NFS mounts -
or the spec file should weed out NFS mounts from the
restorecon command line.

Should I raise a bug on this ?

[Daniel J Walsh]

Jason Vas Dias wrote:

> I'm now doing an upgrade to 
> selinux-policy-targeted-1.17.30-2.83 on FC3,
> and it seems to be doing a recursive restorecon
> on all the NFS mounts on the system - including
> /home/boston, /mnt/redhat, etc.
>
> I don't think this is a good idea at all! 
> This single update of selinux-policy-targeted
> is probably going to take all day, and I hope
> the restorecon on NFS mounts as root is not 
> going to harm other people's mounts of shared
> NFS systems like /home/boston and  /mnt/redhat !
>
> Restorecon in recursive mode should ignore NFS mounts -
> or the spec file should weed out NFS mounts from the
> restorecon command line.
>
> Should I raise a bug on this ?
>
>
>
>
>
>
>
>   
>  
policycoreutils-1.18.1-2.10  should have this backported from rawhide.   
Available in fedora-testing