[selinux-policy] Always run restorecon at install time to make sure key files are labeled correctly

Daniel J Walsh dwalsh at fedoraproject.org
Wed Feb 20 13:13:17 UTC 2013


commit f0628b3cd7d6d87139bde9b0f903b1ef348bc034
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Wed Feb 20 14:13:08 2013 +0100

    Always run restorecon at install time to make sure key files are labeled correctly

 selinux-policy.spec |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/selinux-policy.spec b/selinux-policy.spec
index b5b7136..064274e 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -229,7 +229,7 @@ if [ $? = 0  -a "${SELINUXTYPE}" = %1 -a -f ${FILE_CONTEXT}.pre ]; then \
      rm -f ${FILE_CONTEXT}.pre; \
      /sbin/restorecon -R /home/*/.cache /home/*/.config; \
 fi; \
-/sbin/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* 2> /dev/null; \
+/sbin/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* /etc/*shadow* 2> /dev/null; \
 /sbin/restorecon -R /home/*/.cache /home/*/.config;
 
 %define preInstall() \


More information about the scm-commits mailing list