Hi again, I'm trying to use setfiles to relabel my cyrus directories manually.
my cyrus-imapd.fc file is /usr/lib(64)?/cyrus/master -- gen_context(system_u:object_r:cyrus_exec_t,s0) /var/imap(/.*)? gen_context(system_u:object_r:var_imap_t,s0) If I try and check the existing labeling......... setfiles -c cyrus-imapd.pp libsepol.policydb_read: policydb magic number 0xf97cff8f does not match expected magic number 0xf97cff8c or 0xf97cff8d libsepol.sepol_set_policydb_from_file: can't read binary policy: Success Error reading policy cyrus-imapd.pp: Success Don't you just hate errors like that!! It doesn't seem to matter what I feed it so I must not understand what the "binary policy" parameter should be if its trying to pick the policy from the store... setfiles -c cyrus-imapd Error opening cyrus-imapd: No such file or directory and trying to set it setfiles cyrus-imapd.fc /var cyrus-imapd.fc: line 1 has invalid context gen_context(system_u:object_r:cyrus_exec_t,s0) cyrus-imapd.fc: line 2 has invalid context gen_context(system_u:object_r:var_imap_t,s0) (The FAQ says that this occurs when /selinux is not mounted. however sestatus says... sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 21 Policy from config file: targeted ) same with setfiles cyrus-imapd.fc / since I'm not quite sure what the 'pathname' is and /var is a separate filesystem. Oddly enough rlpkg does work.. Yours in perplexity, John -- [EMAIL PROTECTED] mailing list
