policy packages

Russell Coker russell at coker.com.au
Sat May 15 20:16:30 UTC 2004


On Sun, 16 May 2004 03:41, "Karl MacMillan" <kmacmillan at tresys.com> wrote:
> > I think we should use /etc/selinux as the sym-link to the policy
> > source.  /etc/security/selinux/src is too much typing when you do any
> > serious policy work.
>
> I am not against adding the symlink if /etc/security/selinux/src/policy
> remains. Breaking that compatibility will be a  problem for us and others
> at least in the short term and, if other distributions don't adopt the
> change, a problem in the long term. All of our tools are easily

If /etc/selinux is used then it's best for compatibility for everyone.

Debian has been using /usr/share/selinux/policy/current since Howard suggested 
it:
http://marc.theaimsgroup.com/?l=selinux&m=101864307520785&w=2

Gentoo apparently uses /etc/security/selinux/src/policy.  It seems that if you 
want to have cross-distribution compatibility then a /etc/selinux sym-link is 
the best possibility.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page




More information about the fedora-selinux-list mailing list