Locally defined file contexts

[Gene Czarcinski]

On Thursday 15 April 2004 18:48, Aleksey Nogin wrote:
> On 15.04.2004 15:43, Gene Czarcinski wrote:
> > As I currently understand things, only the tunable.te and users files are
> > intended for modification by the user or local installation.  The rest or
> > the files are for policy-sources and will be updated when the package is
> > updated. I want some place to put rules similar to those in file_contexts
> > or types.fc which will be used to build the master files_contexts but not
> > be replaced when policy-sources is updated.
>
> If you put an _additional_ file into the appropriate directory, it
> should be picked up by the make scripts and will not be overwritten by
> upgrades. For example, I have
> /etc/security/selinux/src/policy/domains/misc/local.te for local policy
> add-ons and /etc/security/selinux/src/policy/file_contexts/misc/local.fc
> for local file_contexts add-ons.

Yes, just what I am looking for.

Perhaps it should be named "local" rather than "misc" but for now it exists.

Thanks.

Gene