Red Hat Bugzilla – Bug 1499259
semanage fcontext "-f/--ftype" description is broken
Last modified: 2018-04-10 12:38:11 EDT
Description of problem: semanage fcontext --help shows the following for "-f/--ftype": -f {a,f,d,c,b,s,l,p}, --ftype {a,f,d,c,b,s,l,p} File Type. This is used with fcontext. Requires a file type as shown in the mode field by ls, e.g. use -d to match only directories or -- to match only regular files. The following file type options can be passed: -- (regular file),-d (directory),-c (character device), -b (block device),-s (socket),-l (symbolic link),-p (named pipe) If you do not specify a file type, the file type will default to "all files". The expected character (a, f, d, c, ...) differs from the actual text. For example to match a regular file, "f" should be used instead of "--". Also, the first dash in option should be removed (e.g. "-d" -> "d"). The manpage is accurrate. Version-Release number of selected component (if applicable): policycoreutils-python-2.2.5-21.el7_2.x86_64
You're right. Manually executed semanage fcontext ... confirms following mapping: -f a -> all files -f b -> block device -f c -> character device -f f -> regular file -f d -> directory -f l -> symbolic link -f p -> named pipe -f s -> socket without -> all files
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:0913