priority between file context rules

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/20/2013 04:34 AM, Vidalie Hervé wrote:
> Thank you for your clarification.
> 
> How to modify current policy to add default context to some paths without
> using semanage fcontext -a? Where can I find sources of the policy I use? 
> (I am using selinux-policy-targeted-3.7.19-195.el6_4.18.noarch)
> 
> Regards,
> 
> Hervé

There are two ways of adding file context mappings, either add them to a
policy package (pp) file and install them, or use semanage fcontext.

If you use a policy package the labeling will work with the existing labeling,
while semanage fcontext -a will take precedence.

semanage fcontext -a -e /var/www /WWW

Might also be usefull for saying labels under one directory should be like
labels under a different directory.

What labeling are you trying to setup?

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlKND7kACgkQrlYvE4MpobM0DgCdHsMcsHuA0xSd+JIFg2r0vXFt
xD8An1ycos+X9O3xpdPjLUekDoAwbAqY
=7f4o
-----END PGP SIGNATURE-----