From: david@hardeman.nu (=?UTF-8?Q?David_H=C3=A4rdeman?=) Date: Fri, 04 Feb 2011 14:14:07 +0100 Subject: [refpolicy] Two issues with restorecon Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Two related issues I just discovered with restorecon (sorry, I'm not close to my private laptop so I can't provide patches): 1) When running "restorecon -r /", restorecon (setfiles) wants to write an audit message that the whole fs is being relabeled (only happens when doing it on /), but the refpolicy doesn't seem to give setfiles_t access to write audit messages which I guess it should. 2) When running "restorecon -r -n /", restorecon (setfiles) wants to write the same audit message as above - which would be misleading since it's not actually changing any labels. -- David H?rdeman