Re: Selinux a prekopirovani [Was Instalace RAID1 dodatecne�do fungujiciho systemu]

[Zdenek SUTR Kaminski]

On Tue, 8 Feb 2005, Petr Bravenec wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Zdenek SUTR Kaminski napsal(a):
> 
> |
> |
> | Tak me napada, ve Fedore je ted SELinux. Jak spravne kopirovat v
> | tomto pripade filesystem?
> |
> | * cp -a --preserve=all zachovava vsechno co ma, ale prijdu o takove
> | vyhody, jako jsou napriklad diry v souboru.
> |
> | * s tarem prijdu i o context
> 
> 
> Například:
> find / -mount -print | cpio -pvudm /mnt

Obavam se, ze si nerozumime, protoze:

# pwd
/root/test

# ls -laZ .
drwxr-xr-x  root     root     root:object_r:user_home_t        .
drwxr-x---  root     root     root:object_r:user_home_dir_t    ..
-rw-r--r--  root     root     user_u:object_r:var_log_t        dmesg
-rw-r--r--  root     root     root:object_r:user_home_t        text.txt

# mkdir -p -Z root:object_r:user_home_t /new/test


# find ./ -print | cpio -pvudm /new/test/
/new/test//./dmesg
/new/test//./text.txt
30 blocks

# ls -laZ /new/test/
drwxr-xr-x  root     root     root:object_r:user_home_t        .
drwxr-xr-x  root     root     root:object_r:root_t             ..
-rw-r--r--  root     root     root:object_r:user_home_t        dmesg
-rw-r--r--  root     root     root:object_r:user_home_t        text.txt

A nelibi se mi context u souboru /new/test/dmesg... Takze cpio je stejne v 
tomto pripade nepouzitelne jako tar.

Pokud pokracuji dale:

# rm -rf /new/test/*
# cp -a --preserve=all * /new/test/
# ls -laZ /new/test/
drwxr-xr-x  root     root     root:object_r:user_home_t        .
drwxr-xr-x  root     root     root:object_r:root_t             ..
-rw-r--r--  root     root     user_u:object_r:var_log_t        dmesg
-rw-r--r--  root     root     root:object_r:user_home_t        text.txt

Tak je jiz vse u souboru dmesg presne tak, jak bych si predstavoval. Az na 
to, ze pokud budou v souboru diry, cp ho proste "nafoukne".


Z.K.
--
Wallachian Laboratories? Freeride in UN*X systems...