I often need to deploy linux rpm style servers set up as templates for clients at remote sites around the world.
Before selinux I would have a remote admin make a basic server at the same kernel level and with similar partitions to my template.
Then I'd scp over a full-templater server tarfile to the remote. Then I.d just exclude things like: fstab, network, /hoot,grub dirs, passwd/shadow, from a fulll system "tar-file" restore and I could get the remote up and going.
I believe that I also need to make sure that I have the same type of selinux mode (targetted) and I exclude /etc/selinux at the target from being overwritten.
The issue is that the remote will boot and present the motd and ask for login-password it will not let any account in. I do not have console access to the remotes and I cannot boot them from a rescue CD.
My question is what selinux things to I have to do to be able to restore an almost entire source template server onto a remote server from a tarfile?