On Fri, 2026-01-09 at 21:25 -0800, Geoffrey Leach wrote:
> I have a theory. Tell me if it makes any sense. After installing F43 I
> copied a user directory from a disk that had backups from a non-SELinux
> system. Could that be the source of my problem?

Could be...  SELinux contexts require a filesystem that can hold their
info, they won't be present on other filesystems.  And when creating
files on a system that supports it, default contexts are created based
on filepaths.  But if you're creating files outside of such a system,
they won't be made.

And that's for *creating* a file, certain other functions don't create
default contexts (such as moving instead of copying).  A move will take
the contexts of where the file originally was along with it (if they
existed).

Also, defaults may not always be correct.  Though I'm not aware of any
software that creates specific contexts when it write a file.  It's
SELinux looking at file paths.  It's a man-in-the-middle, if you like.

> I have set the config to permissive. Is that OK for long term use?

Permissive means supporting the creation of contexts, but actually
paying no attention to them (barring any faults).  SELinux will not be
offering any protective restrictions.  It allows testing, and can be an
aid in recovering from issues, but isn't meant to be the normal
operating mode.



-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
(yes, this is the output from uname for this PC when I posted)
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to