Add SELinux permissive domains to fedora kernels

[Jeremy Katz]

On Tue, 2008-04-01 at 06:42 +0200, Daniel J Walsh wrote:
> Jeremy Katz wrote:
> > On Mon, 2008-03-31 at 14:07 -0400, Eric Paris wrote:
> >> I know its way late but I'd like to add a new SELinux concept to the F9
> >> kernels.  Its going to be a backport of a couple of my changesets headed
> >> upstream
> > 
> > As a cranky release engineering person, no no no no no no
> > 
> > We have a feature freeze for a reason, the kernel doesn't get a blank
> > check to get past it.  If it was that important, it would have been done
> > in time for the freeze.  The next release is in six months, so it's not
> > like it's that long to have to wait
> > 
> I can go either way whether this goes in or not.  The userspace updates
> are done, The only change would be to modify some tools to quickly build
> a policy module to make a domain permissive.
> 
> Permissive domains is a great new feature though:

Yes, and it'll still be a great new feature for Fedora 10.  We have
deadlines.  When we don't stick to them, they lead to releases slippage.

Jeremy