Function setdefaultfilecon

src/install.c:319–351

Modify file context to match the specified policy. If an error occurs the file will remain with the default directory context. Note this sets the context to that returned by selabel_lookup and thus discards MLS levels and user identity of the FILE. */

   context.  Note this sets the context to that returned by selabel_lookup
   and thus discards MLS levels and user identity of the FILE.  */
static void
setdefaultfilecon (char const *file)
{
  if (selinux_enabled != 1)
    {
      /* Indicate no context found. */
      return;
    }

  struct stat st;
  if (lstat (file, &st) != 0)
    return;

  struct selabel_handle *hnd = get_labeling_handle ();
  if (!hnd)
    return;

  char *scontext_raw = NULL;
  if (selabel_lookup_raw (hnd, &scontext_raw, file, st.st_mode) != 0)
    {
      if (errno != ENOENT && ! ignorable_ctx_err (errno))
        error (0, errno, _("warning: %s: context lookup failed"),
               quotef (file));
      return;
    }

  if (lsetfilecon_raw (file, scontext_raw) < 0 && errno != ENOTSUP)
    error (0, errno,
           _("warning: %s: failed to change context to %s"),
           quotef_n (0, file), quote_n (1, scontext_raw));

  freecon (scontext_raw);
}

/* Report that directory DIR was made, if OPTIONS requests this.  */
static void