Re: Sensible labelling decisions and /usr/local/?

Per the FHS (1), /usr/local is for use by the system administrator
when installing software locally.  Locally-installed software that is
not part of the core OS is not likely to have a preexisting SELinux
policy module and thus will run as unconfined_t, which means that the
SELinux file contexts on the /usr/local tree are unlikely to matter.

If you want to change this, you can always set equivalences, and then
re-label:

$ semanage fcontext -a -e /etc /usr/local/etc
$ restorecon -FR -v /usr/local
Relabeled /usr/local/etc from system_u:object_r:usr_t:s0 to
system_u:object_r:etc_t:s0

But again, the file contexts on files in /usr/local is probably just
not going to matter for 99.9% of things.

(1) https://refspecs.linuxfoundation.org/FHS_3.0/fhs/index.html
_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure