On Thu, Apr 30, 2009 at 07:52:06AM -0700, Mike Cloaked wrote:
I should comment on that - on systems prior to F10 I used to have
/home as a
symlink to a home directory on another partition - but that caused real (avc
denial) problems when I ran F10 which was the first time I used SElinux in
earnest - so now I used a bind mount rather than a symlink and SElinux does
not complain. Since SElinux is there by default now, and with no install
option to disable it I decided to climb the SElinux learning curve, and now
all my systems run with SElinux enabled for F10 - I am now happy with that
though there are a few tweaks needed for some applications to work without
avc denials.
I also use bind mounts for mail directories that are stored locally using
dovecot imap so that my previous system's email is not lost during install
of a new system.
SELinux can have problems with bind mounts as well, because when the
system is relabelled, the "wrong" path will label all the files
incorrectly.