-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 12/07/2011 03:14 AM, JB wrote:
JB <jb.1234abcd <at> gmail.com> writes:
...
To make my point clear.
In general, the resuce mode turns all services off for the purpose of preserving the original troubled environment (machine state) and preventing any worsening of it until it can be investigated or fixed.
So it seems a rescue mode should not allow execution of selinux relabeling right before it, under any circumstances.
JB
My understanding is when you are in rescue mode SELinux should be disabled and no relabeling should take place. What does happen is the flag gets set (/.autorelabel). So theoretically when you reboot the machine with SELinux enabled, the first thing it will do is make sure all the labels are correct so SELinux will work properly. If you see a system that you boot in rescue mode trying to relabel, then I would guess this is a bug.