Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread James A. Peltier
- Original Message - | What does matchpathcon /exports/foobar say after you add that rule? they all directories report <> including /exports itself. -- James A. Peltier Manager, IT Services - Research Computing Group Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Gordon Messmer
On 12/27/2012 12:40 PM, Harold Pritchett wrote: > If you want to do this on a regular basis, just script the whole > thing, including a script called from /etc/rc.d/rc.local which checks > for a semaphore file created by the first script and does the > uncomment and "mount -a" if the first script h

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/27/2012 03:08 PM, James A. Peltier wrote: > - Original Message - | -BEGIN PGP SIGNED MESSAGE- | Hash: > SHA1 | | On 12/27/2012 06:09 AM, Markku Kolkka wrote: | > 27.12.2012 3:03, > James A. Peltier kirjoitti: | > | >> I'm really f

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Harold Pritchett
On 12/26/2012 4:05 AM, James A. Peltier wrote: > I'm trying to find a way to exclude file systems during the autorelabel > process. I have a file system (/exports) that has tens of millions of files > on it and I *know* I don't want it relabeled. > How often do you need to do this? The obvious

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread James A. Peltier
- Original Message - | -BEGIN PGP SIGNED MESSAGE- | Hash: SHA1 | | On 12/27/2012 06:09 AM, Markku Kolkka wrote: | > 27.12.2012 3:03, James A. Peltier kirjoitti: | > | >> I'm really feeling dense today. I can't find anywhere in the FTP | >> man | >> page anything related to SELinu

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/27/2012 06:09 AM, Markku Kolkka wrote: > 27.12.2012 3:03, James A. Peltier kirjoitti: > >> I'm really feeling dense today. I can't find anywhere in the FTP man >> page anything related to SELinux labels. > > See "man ftpd_selinux". > Dependin

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Markku Kolkka
27.12.2012 3:03, James A. Peltier kirjoitti: > I'm really feeling dense today. I can't find anywhere in the FTP man page > anything related to SELinux > labels. See "man ftpd_selinux". -- Markku Kolkka markku.kol...@iki.fi ___ CentOS mailing

Re: [CentOS] Excluding file systems from autorelabel

2012-12-26 Thread James A. Peltier
- Original Message - | It is possible to use semanage to label the files correctly and to | persist after reboot see man pages for FTP | Hope this helps | Russell I'm really feeling dense today. I can't find anywhere in the FTP man page anything related to SELinux labels. I've google'd

Re: [CentOS] Excluding file systems from autorelabel

2012-12-26 Thread Gordon Messmer
On 12/26/2012 01:05 AM, James A. Peltier wrote: > I really need to make sure that I can exclude these massive directories if at > all possible. The only way that appears to be available is to mark the filesystem "noauto" and mount it after the system has otherwise started. _

Re: [CentOS] Excluding file systems from autorelabel

2012-12-26 Thread Russell Clay
It is possible to use semanage to label the files correctly and to persist after reboot see man pages for FTP Hope this helps Russell On 26 Dec 2012, at 09:05, "James A. Peltier" wrote: > I'm trying to find a way to exclude file systems during the autorelabel > process. I have a file system (

[CentOS] Excluding file systems from autorelabel

2012-12-26 Thread James A. Peltier
I'm trying to find a way to exclude file systems during the autorelabel process. I have a file system (/exports) that has tens of millions of files on it and I *know* I don't want it relabeled. I've tried semanage fcontext -a -t "<>" "/exports(/.*)?" and it seems to insist on relabeling that f