Skip to contentSkip to conversation

policycoreutils: fixfiles: FIXME label /root but not

PATCH In review Daniel J Walsh 3 participants 4 messages Sep 15, 2011 – Sep 16, 2011 SELinux security module

lore
Share & tools
lore
#0 lore raw

PATCH 10/67 policycoreutils: fixfiles: FIXME label /root but not

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This patch looks good to me. acked.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5yTuEACgkQrlYvE4MpobO54ACfcEm8AugPf9FwIRmqVBvgj1LD MdIAmgN6Ic/2tZZlP+pkdS/1Ht0cvgQT
=hUjl
-----END PGP SIGNATURE-----

#1 lore raw
Quoted 27 lines · Daniel J Walsh

From 0af95817aaac37be5b7bd502df4894bd3e03d4d7 Mon Sep 17 00:00:00 2001
From: Eric Paris <[email protected]>
Date: Sun, 10 Jul 2011 16:25:18 +0200
Subject: [PATCH 10/67] policycoreutils: fixfiles: FIXME label /root but not
/var/lib/BackupPC

This patch removes /root from the excluded dirs.

This also adds /var/lib/BackupPC to list of directories to ignore labeling. Mainly because this directory tends to be Huge and causes a huge spike in the amount of time it takes to relabel. Especially if there is a relabel caused by a policy update.

I'm not certain if either/both of these changes are appropriate.

---
 policycoreutils/scripts/fixfiles |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
policycoreutils/scripts/fixfiles +0 -0
index e4e5f0d..27dcccf 100755

policycoreutils/scripts/fixfiles exclude_dirs_from_relabelling() { · line 106

Quoted 5 lines
policycoreutils/scripts/fixfiles +1 -1
@@ -103,7 +103,7 @@ exclude_dirs_from_relabelling() {
 
 exclude_dirs() {
     exclude=
-    for i in /home /root /tmp /dev; do
+    for i in /var/lib/BackupPC /home /tmp /dev; do

Not everybody uses BackupPC, but just in case, you could make it more general by adapting at run-time to
http://backuppc.sourceforge.net/faq/BackupPC.html#_conf_topdir_

In other words, could read the BackupPC configuration file, if a different TopDir is being used instead of default /var/lib/BackupPC then exclude that.

policycoreutils/scripts/fixfiles exclude_dirs_from_relabelling() { · line 109

Quoted 3 lines
policycoreutils/scripts/fixfiles +0 -0
         [ -e $i ]  && exclude="$exclude -e $i";
     done
     exclude="$exclude `exclude_dirs_from_relabelling`" 

Guido

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.

#2 lore raw

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoted 33 lines · Guido Trentalancia
Quoted 19 lines · Daniel J Walsh

From 0af95817aaac37be5b7bd502df4894bd3e03d4d7 Mon Sep 17 00:00:00 2001 From: Eric Paris <[email protected]> Date: Sun, 10 Jul 2011 16:25:18 +0200 Subject: [PATCH 10/67] policycoreutils: fixfiles:
FIXME label /root but not /var/lib/BackupPC

This patch removes /root from the excluded dirs.

This also adds /var/lib/BackupPC to list of directories to ignore labeling. Mainly because this directory tends to be Huge and causes a huge spike in the amount of time it takes to relabel. Especially if there is a relabel caused by a policy update.

I'm not certain if either/both of these changes are appropriate.

policycoreutils/scripts/fixfiles | 2 +- 1 files changed, 1
insertions(+), 1 deletions(-)

Quoted 8 lines
(quoted diff) +0 -0

b/policycoreutils/scripts/fixfiles index e4e5f0d..27dcccf 100755 --- a/policycoreutils/scripts/fixfiles +++ b/policycoreutils/scripts/fixfiles @@ -103,7 +103,7 @@ exclude_dirs_from_relabelling() {

exclude_dirs() { exclude= - for i in /home /root /tmp /dev;
do + for i in /var/lib/BackupPC /home /tmp /dev; do

Not everybody uses BackupPC, but just in case, you could make it more general by adapting at run-time to
http://backuppc.sourceforge.net/faq/BackupPC.html#_conf_topdir_

Quoted 9 lines

In other words, could read the BackupPC configuration file, if a different TopDir is being used instead of default /var/lib/BackupPC then exclude that.

Quoted 2 lines

[ -e $i ] && exclude="$exclude -e $i"; done exclude="$exclude exclude_dirs_from_relabelling"

Guido

Patches Welcome.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5zXSoACgkQrlYvE4MpobOoCACfVTEhKso9b35Hw4pvFOZqI3F7 3jIAnR297k6xn9ZK/CMt7wJGrCp4GGoW
=PKm7
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.

#3 lore raw
In reply to Guido Trentalancia
Quoted 38 lines · Guido Trentalancia
Quoted 27 lines · Daniel J Walsh

From 0af95817aaac37be5b7bd502df4894bd3e03d4d7 Mon Sep 17 00:00:00 2001
From: Eric Paris <[email protected]>
Date: Sun, 10 Jul 2011 16:25:18 +0200
Subject: [PATCH 10/67] policycoreutils: fixfiles: FIXME label /root but not
/var/lib/BackupPC

This patch removes /root from the excluded dirs.

This also adds /var/lib/BackupPC to list of directories to ignore labeling. Mainly because this directory tends to be Huge and causes a huge spike in the amount of time it takes to relabel. Especially if there is a relabel caused by a policy update.

I'm not certain if either/both of these changes are appropriate.

---
 policycoreutils/scripts/fixfiles |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
policycoreutils/scripts/fixfiles +0 -0
index e4e5f0d..27dcccf 100755

policycoreutils/scripts/fixfiles exclude_dirs_from_relabelling() { · line 106

Quoted 5 lines
policycoreutils/scripts/fixfiles +1 -1
@@ -103,7 +103,7 @@ exclude_dirs_from_relabelling() {
 
 exclude_dirs() {
     exclude=
-    for i in /home /root /tmp /dev; do
+    for i in /var/lib/BackupPC /home /tmp /dev; do

Not everybody uses BackupPC, but just in case, you could make it more general by adapting at run-time to
http://backuppc.sourceforge.net/faq/BackupPC.html#_conf_topdir_

Quoted 3 lines

In other words, could read the BackupPC configuration file, if a different TopDir is being used instead of default /var/lib/BackupPC then exclude that.

I have not included this patch in my queue to merge. I wonder if there might not be further comments on the removal of /root as well.

-Eric

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.