Re: [PATCH v4 2/2] man: Document directory cycle handling of selinux_restorecon

On Tue, Jul 28, 2026 at 10:50 AM Stephen Smalley
<[email protected]> wrote:
>
> On Tue, Jul 28, 2026 at 3:09 AM Johannes Segitz <[email protected]> wrote:
> >
> > Skipping directory cycles instead of aborting the file tree walk is a
> > user visible behavior change: restorecon -R over a tree containing e.g.
> > a bind mount of an ancestor directory now logs a warning, skips the
> > cycle and completes successfully, instead of failing with ELOOP.
> >
> > Document the new behavior for the flag SELINUX_RESTORECON_RECURSE,
> > including that a cycle is not an error and therefore is neither
> > affected by SELINUX_RESTORECON_ABORT_ON_ERROR nor counted by
> > SELINUX_RESTORECON_COUNT_ERRORS, and note the previous behavior in the
> > selinux_restorecon(3), restorecon(8) and setfiles(8) man pages.
> >
> > Signed-off-by: Johannes Segitz <[email protected]>
>
> Thank you for doing this!
>
> Acked-by: Stephen Smalley <[email protected]>

This series is merged.