Add SELinux permissive domains to fedora kernels

[Eric Paris]

On Tue, 2008-04-01 at 10:50 -0400, Jeremy Katz wrote:
> On Tue, 2008-04-01 at 06:42 +0200, Daniel J Walsh wrote:
> > Jeremy Katz wrote:
> > > On Mon, 2008-03-31 at 14:07 -0400, Eric Paris wrote:
> > >> I know its way late but I'd like to add a new SELinux concept to the F9
> > >> kernels.  Its going to be a backport of a couple of my changesets headed
> > >> upstream
> > > 
> > > As a cranky release engineering person, no no no no no no
> > > 
> > > We have a feature freeze for a reason, the kernel doesn't get a blank
> > > check to get past it.  If it was that important, it would have been done
> > > in time for the freeze.  The next release is in six months, so it's not
> > > like it's that long to have to wait
> > > 
> > I can go either way whether this goes in or not.  The userspace updates
> > are done, The only change would be to modify some tools to quickly build
> > a policy module to make a domain permissive.
> > 
> > Permissive domains is a great new feature though:
> 
> Yes, and it'll still be a great new feature for Fedora 10.  We have
> deadlines.  When we don't stick to them, they lead to releases slippage.

Well Dan unless you cover his eyes when I do the commit I guess we'll
get this when F9 pulls the next kernel from linus   :(

-Eric