Re: [Dump-users] restore -C EA (SELinux) problem

[Tony N. <ton...@ge...>]

At 2:20 PM -0400 4/23/06, Tony Nelson wrote:
>I'm trying to learn how to use dump and restore (to/from DVD+/-R), and I've
>gotten it working to the point where the file data seems to be OK but the
>SELinux Extended Attributes are not.  I used the commands (as root, with my
>/ being LogVol02):
>
>    # mount -r /dev/VolGroup00/LogVol00 /mnt/lv00
>    # dump -0 -L xxx -B 4590208 -f /tmp/dumpdvd /dev/VolGroup00/LogVol00
>        [cdrecord used once per tape, from another terminal]
>        # cdrecord -v -sao dev=dvd -data /tmp/dumpdvd
>    # restore -C -f /dev/dvd
>
>OK, some of that is superstition, but it works except for one of these
>messages for each file, and no other errors (according to grep -v):
>
>    ./path/to/file: EA foo_x:object_r:bar_y value changed
 ...

OK, now I understand that these errors are due to a change in SELinux in
Fedora Core 5, where the 4th component (MLS) of the Security Context has
been enabled.  When dump did the backup of the volume made under FC3, it
only dumped the 3 components that were in current use.  When restore tried
to compare the backup with the volume, it got "invented" MLS components, so
the security contexts did differ.

I expect that restore needs to cope with this somehow.  Possibly SELinux
needs some work as well -- I'll ask for help on the fedora-selinux-list.
____________________________________________________________________
TonyN.:'                       <mailto:ton...@ge...>
      '                              <http://www.georgeanelson.com/>