--On Tuesday, 29 January, 2002 10:32 -0500 Stephen Smalley <sds@tislabs.com> wrote:

> You also need to assign the program type
> associated with the domain to the program in the file_contexts
> configuration and run 'make relabel' in the setfiles directory.
> Alternatively, you can directly set the label on a program via chcon, but
> it is a good idea to also update the file_contexts configuration in case
> you later do a 'make relabel'.

i would emphasize this last sentence, as i've confused myself by failing to track manually labeled files in file_contexts only to have policy changes fail to work unexpectedly after i'd relabel the file system.

as an aside, the default install for file-utils in the latest release doesn't seem to install the chcon man page, so i didn't find the option to not dereference symbolic links for a bit.

-paul

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.