Re: SELinux for upstream coreutils, finally (RFC: does mkdir need -Z?)

[Pádraig Brady]

Jim Meyering wrote:
> I've merged the SELinux changes onto the trunk.  For reference, this
> work is based on the patches from Fedora, as of about 6 months ago

[snip]

> Unlike with other SELinux-enabled coreutils, here, mv and cp do not
> provide the "-Z context" option.  It is not the job of such programs
> to *change* the security context (which that -Z context enabled).
> 
> Regarding the --context=C (-Z C) option that is now accepted by
> mkdir, mknod, mkfifo, and install, I am inclined to
> omit it altogether, and there was a lot of discussion on the SELinux
> mailing list, boiling down to whether the alternative I proposed
> was sufficiently "usable".

+1 for fscon purely from an interface point of view.

Personally I (and anyone I know) has always disabled SELinux.

Pádraig.