SElinux settings different for upgrade vs full-install

[Douglas Otis]

When logging in as root on an upgraded system,  the desktop would not load
(gconf related errors), and there appeared to be no way to shutdown or
escape beyond hitting the system reset while seeing mostly a blank screen.

There was a difference noticed between a full-install and the upgrade from
Fedora 8.  User Mapping for "root" had been "root", whereas the full-install
had this set to "unconfined_u" (which is also the default).  Making this
change seems to have fixed the problem noticed when starting a graphical
logon as root.

After making this change, the system Default Policy Type also changed to
"targeted".  Being new to SElinux, it is hard to know the risk this may
represent, if any.  Does anyone know?  Should the policy exceptions be used
to modify SElinux instead?

-MtView
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20080721/5db63c83/attachment-0001.htm>