Allow the "security.restorecon_last" extended attribute to be ignored.
Setting this flag/option will not check or update any directory SHA1 digests.
Use this option to effectively disable usage of the security.restorecon_last
extended attribute. Note that setting this flag will override the
SELINUX_RESTORECON_IGNORE_DIGEST flag.

Richard Haines (2):
  libselinux: Ignore restorecon_last in selinux_restorecon(3)
  policycoreutils: setfiles - Add option to ignore restorecon_last

 libselinux/include/selinux/restorecon.h  |  4 ++++
 libselinux/man/man3/selinux_restorecon.3 | 20 +++++++++++++++++---
 libselinux/src/selinux_restorecon.c      |  9 ++++++++-
 libselinux/utils/selinux_restorecon.c    |  9 +++++++--
 policycoreutils/setfiles/restore.c       |  5 +++--
 policycoreutils/setfiles/restore.h       |  2 ++
 policycoreutils/setfiles/restorecon.8    | 14 ++++++++++++--
 policycoreutils/setfiles/setfiles.8      | 12 +++++++++++-
 policycoreutils/setfiles/setfiles.c      | 19 ++++++++++++-------
 9 files changed, 76 insertions(+), 18 deletions(-)

-- 
2.7.4

_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to selinux-le...@tycho.nsa.gov.
To get help, send an email containing "help" to selinux-requ...@tycho.nsa.gov.

Reply via email to