.te file in RPMs

mike at flyn.org mike at flyn.org
Tue Apr 20 17:03:11 UTC 2004


>> I would like to learn the proper way for a package to install an
associated
>> te file, rebuild the SELinux policy and load the new policy.  Could
someone
>> point me in the proper direction?  Is there something better than "make
>> reload" in the post-install script?
 
> Currently there is no proper method.
> 
> Loading the policy in the post-install alone won't do it.  Any policy that
> is significant will add new file types, and the package which contains the 
> policy (*) will have files that need to be labeled with those types.  This 
> means that you would have to not only load the policy but label the files
> in the post-install script.  This is ugly.

Does this mean that this is not a blocker for Fedora Core 2, as the entry in
the SELinux roadmap at http://fedora.redhat.com/projects/selinux/ seems to
imply ("Fedora Core 2 release may happen after item 9 or 10...")?

--
Mike



More information about the fedora-selinux-list mailing list