On Wed, 30 Dec 2009 18:52:02 -0600
Robert Nichols <rnicholsNOSPAM(a)comcast.net> wrote:
On my system I have home directories in /var/home and bind mounted
to /home:
/var/home on /home type none (rw,bind)
Is there any way to prevent restorecon on /var from descending into
/var/home and destroying the normal home directory file contexts?
Reproducing all of file_contexts.homedirs in local policy is of course
unmaintainable.
You can make the file contexts for /var/home match those for /home very
easily on F-11 onwards:
# semanage fcontext -a -e /home /var/home
See
http://danwalsh.livejournal.com/2009/04/09/ for Dan's blog on file
context equivalency.
On a slightly related issue, I note that current selinux-policy
packages do a restorecon on the contents of /var/lib, which on my mock
buildsystem is *huge* (all buildroots live under /var/lib/mock) and
takes a very long time indeed. I wonder what the problem is that this
behaviour is trying to solve?
Paul.