On Sat, 25 Jan 2020 19:42:53 +0100 =?UTF-8?Q?Christian_G=C3=B6ttsche?= <[email protected]> wrote: > It is not needed for anything to work correctly; it is just that > objects should have the context defined by the SELinux policy. The > root_t context should only be used by the root path directory, > anything else is suspicious and should be avoided. Also if one sets up > an alert for incorrect labeled objects (e.g. via repeatedly running > restorecon -v -R -n /) this mislabeling would trigger.
Even better would be if the linux-update-symlinks perl script fixed the symlinks label before replacing it in an atomic operation in https://salsa.debian.org/kernel-team/linux-base/-/blob/master/bin/linux-update-symlinks#L49-76 -- bauen1 https://dn42.bauen1.xyz/
