Jim Meyering said the following on 2008-07-19 22:18: > Cai Xianchao <[EMAIL PROTECTED]> wrote: > >> I run as root and used chcon -l to set range of a file, but it failed and >> there was error message output. >> >> >> I did as follows: >> #uname -r >> 2.6.18-92.el5 >> >> #sestatus >> SELinux status: enabled >> SELinuxfs mount: /selinux >> Current mode: enforcing >> Mode from config file: enforcing >> Policy version: 21 >> Policy from config file: targeted >> >> #chcon -l s0:c1 test >> >> #ls -Z >> -rw-r--r-- root root root:object_r:user_home_t:s0:c1 test >> >> #chcon -l s0:c0-s0:c0.c100 test >> chcon: failed to change context of test to >> root:object_r:user_home_t:s0:c0-s0:c0.c100: Permission denied >> >> How can i change high level of a file when SELINUX is open and the policy >> is targeted? >> > > Thanks for the report, but I don't understand what you'd like to do. >
I wanted to set the file's SE Linux High Level when SE Linux is open, but it failed. It's strange that a file's SE Linux Low Level can be set, but High Level can't. > What would you like "ls -Z test" to print after you've adjusted the > context of that file? > I want to see if it is success to set the file's SE Linux Low Level. > > -- Regards Cai Xianchao A new email address of FJWAN is launched from Apr.1 2007. The updated address is: [EMAIL PROTECTED] -------------------------------------------------- Cai Xianchao Development Dept.I Nanjing Fujitsu Nanda Software Tech. Co., Ltd.(FNST) 8/F., Civil Defense Building, No.189 Guangzhou Road, Nanjing, 210029, China TEL: +86+25-86630566-837 COINS: 79955-837 FAX: +86+25-83317685 [EMAIL PROTECTED] -------------------------------------------------- This communication is for use by the intended recipient(s) only and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not an intended recipient of this communication, you are hereby notified that any dissemination, distribution or copying hereof is strictly prohibited. If you have received this communication in error, please notify me by reply e-mail, permanently delete this communication from your system, and destroy any hard copies you may have printed _______________________________________________ Bug-coreutils mailing list Bug-coreutils@gnu.org http://lists.gnu.org/mailman/listinfo/bug-coreutils
