Description of problem:

The fixfiles man page says that it doesn't change contexts in verify/check mode:

"verify   List out files with incorrect file context labels, but do not change them."
"check    print any incorrect file context labels, showing old and new context, but do not change them."

But it is fixing unlabeled_t and undefined_t contexts in /tmp, /var/tmp, /var/run and /var/lib/debug and even deletes socks and pipes with that contexts from /tmp.

besides that, at the beginning of the process, fixfiles prints message, that it is "Relabeling / /boot /dev /dev/hugepages /dev/mqueue /dev/pts /dev/shm /run /sys /sys/fs/cgroup /tmp"  which is not true in verify/check modes.


Version-Release number of selected component (if applicable):
policycoreutils-2.1.14-70.el7.x86_64



How reproducible:
always

Steps to Reproduce:
# ls -laZ /tmp/testfile 
-rw-r--r--. root root system_u:object_r:unlabeled_t:s0 /tmp/testfile

# fixfiles verify
skipping the directory /var/log from relabelling
Relabeling / /boot /dev /dev/hugepages /dev/mqueue /dev/pts /dev/shm /run /sys /sys/fs/cgroup /tmp

# ls -laZ /tmp/testfile 
-rw-r--r--. root root system_u:object_r:tmp_t:s0       /tmp/testfile



Expected results:

Change the message from "relabeling.." to something more suitable for the verify/check mode
Prevent changing context in those modes