[Fedora-livecd-list] [patch] Configuring Network after Configuring System
Douglas McClendon
dmc.fedora at filteredperception.org
Wed Aug 8 00:54:46 UTC 2007
Jeremy Katz wrote:
> On Tue, 2007-08-07 at 16:42 -0500, Douglas McClendon wrote:
>> This might be the wrong list to be asking this, but out of curiosity-
>>
>> Why can't relabeling be done if the host is running with selinux
>> disabled? (selinux=0)
>> It's just writing some metadata to the fs right? Seems like it should
>> be possible.
>
> Because the kernel developers have deemed it unsafe to write out any
> security xattrs which aren't understood by the kernel. The fact that
> they then get mapped to unlabeled_t doesn't seem to make much
> difference. Frankly, I think they're wrong, but lengthy attempts to
> convince them in the past have been unsuccessful. Maybe it's worth
> tilting at that windmill again. Dunno.
Thats the sort of info I was looking for. I'm probably part of a very
small group of people who would notice, and even I don't care that much.
I'll post a little script one of these days that gets around it :)
-dmc
More information about the livecd
mailing list