Thanks for your answer, now it seems more clear. I downloaded hardened-livecd-2005.1.iso, but I can not use rlpkg to re-label directly from the livedcd system.<br><br>How about this idea: <br>&nbsp;&nbsp; (1) cp -a&nbsp; /&nbsp; to a USB Storage disk with jfs file system
<br>&nbsp;&nbsp; (2) mount the USB Storage jfs file system <br>&nbsp;&nbsp; (3) rlpkg -a -r<br>&nbsp;&nbsp; (4) boot from the hardened-livecd-2005.1.iso, cp -a the new labled system back.<br>Can these steps solved the problem?<br><br><br>Walter<br><br>
<br><br><div><span class="gmail_quote">On 9/11/07, <b class="gmail_sendername">Remy Bosch</b> &lt;<a href="mailto:remybosch@...">remybosch@...</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
guo walter wrote:<br>&gt; Yep, my question should be&nbsp;&nbsp;the same thing with thread, and it seems<br>&gt; there no clear solution by now, doesn&#39;t it?<br><br>Alas, no. Not as simple as in the past without selinux ;)<br>The thing here, is that at some point have a running system, but there
<br>are a few directories/files that need labeling, which cannot be done<br>straight forward, because they&#39;re used. You need the bare filesystem<br>as-is, so mount your root somewhere else and label them as wanted. It
<br>takes care of the first warnings. After that, you&#39;ll have to ask/read<br>around as information is a bit fragmented. There isn&#39;t a full easy howto<br>yet, though there are some very good starter point&#39;s - sorry, I don&#39;t
<br>have the adresses at hand here.<br><br>Good luck,<br><br><br>Remy<br><br>--<br><a href="mailto:gentoo-hardened@g.o">gentoo-hardened@g.o</a> mailing list<br><br></blockquote></div><br>