A question about genhomedircon

A question about genhomedircon

[Manoj Srivastava]

Hi,

        Looking at policycoreutils-2.0.77/scripts/genhomedircon, I see:
--8<---------------cut here---------------start------------->8---
#!/bin/sh
/usr/sbin/semodule -Bn
--8<---------------cut here---------------end--------------->8---

        Looking at the man page for semodule, it says:
--8<---------------cut here---------------start------------->8---
 -B, --build
        force a rebuild of policy (also reloads unless -n is used)
 -n,--noreload
        do not reload policy after commit
--8<---------------cut here---------------end--------------->8---

        Given that, it would seem that genhomedircon rebuilds, but does
 not reload policy. I would expect genhomedircon to generate SELinux
 file context configuration entries for user home directories, or
 something.

        What am I missing?

        manoj
-- 
Manoj Srivastava <srivasta@acm.org> <http://www.golden-gryphon.com/>  
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: A question about genhomedircon

[Manoj Srivastava]

Hi,
On Fri, Nov 20 2009, Manoj Srivastava wrote:

>         Looking at policycoreutils-2.0.77/scripts/genhomedircon, I see:
> #!/bin/sh
> /usr/sbin/semodule -Bn
>         Looking at the man page for semodule, it says:
>  -B, --build
>         force a rebuild of policy (also reloads unless -n is used)
>  -n,--noreload
>         do not reload policy after commit
>         Given that, it would seem that genhomedircon rebuilds, but does
>  not reload policy. I would expect genhomedircon to generate SELinux
>  file context configuration entries for user home directories, or
>  something.
>
>         What am I missing?

        I also note that there used to be a man page (see
 http://linux.die.net/man/8/genhomedircon  for the old contents) that
 also seems to have gone away.

        manoj
-- 
Manoj Srivastava <srivasta@acm.org> <http://www.golden-gryphon.com/>  
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: A question about genhomedircon

[Christopher J. PeBenito]

On Fri, 2009-11-20 at 12:52 -0600, Manoj Srivastava wrote:
> Hi,
> 
>         Looking at policycoreutils-2.0.77/scripts/genhomedircon, I see:
> --8<---------------cut here---------------start------------->8---
> #!/bin/sh
> /usr/sbin/semodule -Bn
> --8<---------------cut here---------------end--------------->8---
> 
>         Looking at the man page for semodule, it says:
> --8<---------------cut here---------------start------------->8---
>  -B, --build
>         force a rebuild of policy (also reloads unless -n is used)
>  -n,--noreload
>         do not reload policy after commit
> --8<---------------cut here---------------end--------------->8---
> 
>         Given that, it would seem that genhomedircon rebuilds, but does
>  not reload policy. I would expect genhomedircon to generate SELinux
>  file context configuration entries for user home directories, or
>  something.
> 
>         What am I missing?

Theres no need to reload the policy, as the policy isn't changing.  It
does, however, regenerate the file contexts, including the home dir
contexts.


-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: A question about genhomedircon

[Manoj Srivastava]

On Fri, Nov 20 2009, Christopher J. PeBenito wrote:


> Theres no need to reload the policy, as the policy isn't changing.  It
> does, however, regenerate the file contexts, including the home dir
> contexts.

        So the behaviour has not changed? In which case, can we bring
 back the  man page for the command?

        manoj
-- 
Manoj Srivastava <srivasta@acm.org> <http://www.golden-gryphon.com/>  
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: A question about genhomedircon

[Daniel J Walsh]

On 11/27/2009 09:18 PM, Manoj Srivastava wrote:
> On Fri, Nov 20 2009, Christopher J. PeBenito wrote:
> 
> 
>> Theres no need to reload the policy, as the policy isn't changing.  It
>> does, however, regenerate the file contexts, including the home dir
>> contexts.
> 
>         So the behaviour has not changed? In which case, can we bring
>  back the  man page for the command?
> 
>         manoj
Sounds good to me.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.