[Bug 222594] Review Request: seedit: SELinux Policy Editor

bugzilla at redhat.com bugzilla at redhat.com
Tue Jan 23 08:14:24 UTC 2007


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: seedit: SELinux Policy Editor


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=222594





------- Additional Comments From ynakam at hitachisoft.jp  2007-01-23 03:14 EST -------
SELinux Policy Editor generates its own policy under /etc/selinux/seedit.
It can not be editted without seedit, seedit-policy packages.
And when user uses seedit for the first time, 
/etc/selinux/seedit is overwritten.
SELINUXTYPE=targeted
->
SELINUXTYPE=seedit

So, when seedit is uninstalled, 
/etc/selinux/seedit becomes unuseful, because it can not be editted.
So /etc/selinux/config should be editted.
SELINUXTYPE=seedit
->
SELINUXTYPE=targeted

>* scriptlets:
>  ... By the way, what if user sets selinux policy as
>  "DISABLED"? There may be the case in which sysadmin
>  has to disable selinux for some reason. In the case,
>  selinux degree is "upgraded" to TARGETED?
I've understood what you say, and I agree.
In the latest seedit.spec,
it will not touch "SELINUX=" line.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.




More information about the Fedora-package-review mailing list