Overriding default file contexts?

[Stephen Smalley]

On Mon, 2006-04-03 at 08:51 -0500, Ian Pilcher wrote:
> Paul Howarth wrote:
> > 
> > You can do this with semanage (FC5) rather than a separate file.
> > 
> > # semanage fcontext -a -t textrel_shlib_t '/path/to/acroread/lib.*'
> > 
> 
> After testing that command with one of the Acrobat libraries,
> 'restorecon -nv ...' still wants to change its type back to lib_t.  So
> it doesn't appear to be any more permanent that chcon.

Hmmm...it should be.  
# tail -1 /etc/selinux/targeted/contexts/files/file_contexts
# cat /etc/selinux/targeted/modules/active/file_contexts.local

-- 
Stephen Smalley
National Security Agency