dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

datavol: Only set SELinux label of root directory 

Restoring the SELinux label of a mount point is really only necessary
for a band new filesystem, which will have no label at all.  In other
cases, changing the context is probably neither necessary nor desirable,
as the existing data is potentially labelled correctly already.
Changing the label on on only the root directory should be sufficient to
ensure applications run correctly with newly-provisioned filesystems,
since they only have one directory anyway, without impacting too much
for existing filesystems.
frigate-exporter
Dustin 2024-08-12 22:11:27 -05:00
parent 34fcaa52ef
commit 9ae88a5f36
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
datavol.yml
View File

@ -48,5 +48,5 @@
- name: fix data volume selinux context - name: fix data volume selinux context
command: command:
restorecon -RF {{ item.mountpoint }} restorecon -F {{ item.mountpoint }}
loop: '{{ data_volumes }}' loop: '{{ data_volumes }}'