post direct-file-modification commands

Steve Friedman steve at adsi-m4.com
Wed Nov 29 23:41:03 UTC 2006


The various GUI tools are nice for getting a policy configured correctly; 
however, to propagate this configuration to a series of like modified 
machines one runs into a speed bump.

The files (e.g., booleans.local) state that the semanage command should be 
used to modify the file; however, via the GUI I am blissfully unaware of 
the actual commands (and would like to remain so).

But, it would seem that it should be perfectly legal to propagate the 
various ".local" files directly.  If this is legal, what commands must be 
issued to cause selinux to read the various policy updates?  If this isn't 
legal, then what means can be used to propagate the policy?

Steve Friedman




More information about the fedora-selinux-list mailing list