[redhat-lspp] Removing autorelabel script from MLS policy

Jonathan Kim jkim at TrustedCS.com
Thu Nov 3 16:28:42 UTC 2005


The 'autorelabel' script is not necessary any more, so it can be removed
from MLS policy RPM.

These are the short steps to apply MLS policy from default FC4.
I referred from Paul's "How-To: Configuring Fedora Core to Use the MLS
SELinux policy" email sent a while ago.

1. Install FC4
2. yum update to rawhide
3. reboot to see things works as expected
4. yum install selinux-mls-policy and selinux-mls-policy-sources from
rawhide
5. change 'targeted' to 'mls' in /etc/selinux/config
6. touch /.autorelabel
7. reboot to 'singe and non-enforcing' mode (relabeling on boot)
8. reboot

Thanks!

-----------------------------------
Jonghoon Jonathan
Secure Systems Engineer

Trusted Computer Solutions
121 W Goose Alley
Urbana, IL  61801

http://www.TrustedCS.com

V:  217.384.0028  ext.16
F:  217.384.0288




More information about the redhat-lspp mailing list