fc5: several troubles at my first attempt

Stephen Smalley sds at tycho.nsa.gov
Wed Mar 15 17:58:54 UTC 2006


On Wed, 2006-03-15 at 12:55 -0500, Stephen Smalley wrote:
> I believe that the (highly modular) strict policy is known to be broken
> in fc5/rawhide because of the file contexts ordering issue, which
> requires further changes to libsemanage.  Right, Dan?  So only -targeted
> or -mls are in a working state.  Possibly that -strict policy shouldn't
> be included in fc5 since it is known to be broken?

Another option btw would be to put everything into the base module for
-strict as is being done for -targeted and -mls already, right?  That
would at least provide a working -strict policy for fc5.

-- 
Stephen Smalley
National Security Agency




More information about the fedora-selinux-list mailing list