RE: file contexts and modularity

[Ivan Gyurdiev <gyurdiev@xxxxxxxxxx>]

> > > The file contexts serves a different purpose.
> > > I agree with you in that I don't like having hundreds of files there,
> > > but at the same time I don't see an alternative.
> > 
> > Polyinstantiate every user home directory ;)
> > Anyone following up on Chad Seller's work there?
> > Then you have dynamically created per-role home directories
> > transparently mounted on the user's home directory for whatever role the
> > user happens to be logged in as.
> > 
> 
> Perfect! 

Can you explain how this would work a bit?
How would matchpathcon work on a polyinstantiated directory?





--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.