setfiles,restorecon: new SELinux applets by Yuichi Nakamura <ynakam@hitachisoft.jp>

1 files changed, 26 insertions, 0 deletions

diff --git a/selinux/Config.in b/selinux/Config.in
index 42bca66d6..77f89c798 100644
--- a/selinux/Config.in
+++ b/selinux/Config.in
@@ -49,6 +49,14 @@ config MATCHPATHCON
           Enable support to get default security context of the
           specified path from the file contexts configuration.
 
+config RESTORECON
+        bool "restorecon"
+        default n
+        depends on SELINUX
+        help
+          Enable support to relabel files. The feature is almost
+          the same as setfiles, but usage is a little different.
+
 config RUNCON
         bool "runcon"
         default n
@@ -78,5 +86,23 @@ config SETENFORCE
         help
           Enable support to modify the mode SELinux is running in.
 
+config SETFILES
+        bool "setfiles"
+        default n
+        depends on SELINUX
+        help
+          Enable support to modify to relabel files.
+          Notice: If you built libselinux with -D_FILE_OFFSET_BITS=64,
+          (It is default in libselinux's Makefile), you _must_ enable
+          CONFIG_LFS.
+
+config FEATURE_SETFILES_CHECK_OPTION
+        bool "Enable check option"
+        default n
+        depends on SETFILES
+        help
+          Support "-c" option (check the validity of the contexts against
+          the specified binary policy) for setfiles. Requires libsepol.
+
 endmenu