On an SE Linux system barring file system corruption and quota issues every
file on a regular file system (Ext3 etc) should have a SE Linux label.
As a test I did a default install of FC4T3 in the "Personal Workstation"
configuration and checked this. Below is the relevant output from setfiles
-v when relabelling the root file system.
It seems to me that /usr/share/apps/ksplash, /usr/share/apps/ksplash/Themes,
/usr/share/anaconda, /usr/share/anaconda/pixmaps, /usr/lib/anaconda-runtime,
/usr/lib/anaconda-runtime/boot, and the install logs are created by Anaconda
which doesn't apply SE Linux labels. Would it be possible to get Anaconda
changed to apply labels to files and directories that it creates?
I have no idea why the Portuguese Brazilian language file didn't get a label
when all the other language files did.
I have attached a list of all the files which aren't correctly labeled after a
default targeted install which I haven't dealt with in other messages. NB
this includes /etc/shadow...
setfiles: relabeling /usr/share/apps/ksplash from system_u:object_r:file_t to
system_u:object_r:usr_t
setfiles: relabeling /usr/share/apps/ksplash/Themes from
system_u:object_r:file_t to system_u:object_r:usr_t
setfiles: relabeling /usr/share/anaconda from system_u:object_r:file_t to
system_u:object_r:usr_t
setfiles: relabeling /usr/share/anaconda/pixmaps from
system_u:object_r:file_t to system_u:object_r:usr_t
setfiles: relabeling /usr/lib/anaconda-runtime from system_u:object_r:file_t
to system_u:object_r:lib_t
setfiles: relabeling /usr/lib/anaconda-runtime/boot from
system_u:object_r:file_t to system_u:object_r:lib_t
setfiles: relabeling /usr/X11R6/lib/X11/locale/pt_BR.UTF-8 from
system_u:object_r:file_t to system_u:object_r:lib_t
setfiles: relabeling /root/install.log from system_u:object_r:file_t to
root:object_r:user_home_t
setfiles: relabeling /root/install.log.syslog from system_u:object_r:file_t
to root:object_r:user_home_t
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page