stop relabeling /var/lib
This commit is contained in:
parent
8996b8925e
commit
6b3837d6e4
@ -191,7 +191,7 @@ FILE_CONTEXT=%{_sysconfdir}/selinux/%1/contexts/files/file_contexts; \
|
|||||||
selinuxenabled; \
|
selinuxenabled; \
|
||||||
if [ $? = 0 -a "${SELINUXTYPE}" = %1 -a -f ${FILE_CONTEXT}.pre ]; then \
|
if [ $? = 0 -a "${SELINUXTYPE}" = %1 -a -f ${FILE_CONTEXT}.pre ]; then \
|
||||||
fixfiles -C ${FILE_CONTEXT}.pre restore; \
|
fixfiles -C ${FILE_CONTEXT}.pre restore; \
|
||||||
restorecon -R /root /var/log /var/run /var/lib 2> /dev/null; \
|
restorecon -R /root /var/log /var/run 2> /dev/null; \
|
||||||
rm -f ${FILE_CONTEXT}.pre; \
|
rm -f ${FILE_CONTEXT}.pre; \
|
||||||
fi;
|
fi;
|
||||||
|
|
||||||
@ -332,7 +332,7 @@ SELinux Reference policy targeted base module.
|
|||||||
packages=`cat /usr/share/selinux/targeted/modules.lst`
|
packages=`cat /usr/share/selinux/targeted/modules.lst`
|
||||||
if [ $1 -eq 1 ]; then
|
if [ $1 -eq 1 ]; then
|
||||||
%loadpolicy targeted $packages
|
%loadpolicy targeted $packages
|
||||||
restorecon -R /root /var/log /var/run /var/lib 2> /dev/null
|
restorecon -R /root /var/log /var/run 2> /dev/null
|
||||||
else
|
else
|
||||||
semodule -n -s targeted -r moilscanner mailscanner gamin audio_entropy iscsid polkit_auth polkit rtkit_daemon ModemManager telepathysofiasip ethereal 2>/dev/null
|
semodule -n -s targeted -r moilscanner mailscanner gamin audio_entropy iscsid polkit_auth polkit rtkit_daemon ModemManager telepathysofiasip ethereal 2>/dev/null
|
||||||
%loadpolicy targeted $packages
|
%loadpolicy targeted $packages
|
||||||
@ -389,7 +389,7 @@ semanage -S minimum -i - << __eof
|
|||||||
login -m -s unconfined_u -r s0-s0:c0.c1023 __default__
|
login -m -s unconfined_u -r s0-s0:c0.c1023 __default__
|
||||||
login -m -s unconfined_u -r s0-s0:c0.c1023 root
|
login -m -s unconfined_u -r s0-s0:c0.c1023 root
|
||||||
__eof
|
__eof
|
||||||
restorecon -R /root /var/log /var/run /var/lib 2> /dev/null
|
restorecon -R /root /var/log /var/run 2> /dev/null
|
||||||
else
|
else
|
||||||
%relabel minimum
|
%relabel minimum
|
||||||
fi
|
fi
|
||||||
@ -458,7 +458,7 @@ packages=`cat /usr/share/selinux/mls/modules.lst`
|
|||||||
%loadpolicy mls $packages
|
%loadpolicy mls $packages
|
||||||
|
|
||||||
if [ $1 -eq 1 ]; then
|
if [ $1 -eq 1 ]; then
|
||||||
restorecon -R /root /var/log /var/run /var/lib 2> /dev/null
|
restorecon -R /root /var/log /var/run 2> /dev/null
|
||||||
else
|
else
|
||||||
%relabel mls
|
%relabel mls
|
||||||
fi
|
fi
|
||||||
|
Loading…
Reference in New Issue
Block a user