Re: [rdiff-backup-users] Re: How to back up SELinux contexts?

[dean gaudet]

On Fri, 27 Jan 2006, dean gaudet wrote:

> On Fri, 27 Jan 2006, Troels Arvin wrote:
> 
> > On Thu, 26 Jan 2006 16:48:42 -0800, dean gaudet wrote:
> > 
> > > you probably need to install pyxattr package... i don't know the redhat
> > > package name.  install pylibacl while you're at it...
> > 
> > I already have the "python-xattr" and "python-libacl" packages installed
> > on both the production and backup servers.
> 
> dumb selinux question... does rdiff-backup have permissions to read all 
> the attributes?  i assume selinux has some way of controlling that...

also further dumb selinux question... i wonder if rdiff-backup's 
filesystem capabilities detection code is getting errors because selinux 
is preventing it from testing extended attributes... you might try running 
with a -vN for some N>4 to get more verbose logging.

and for restores it would certainly need to be able to recreate all 
selinux attributes -- a privelege level which is almost certainly not the 
default for all binaries even when run as root...

-dean