Locally defined file contexts
Aleksey Nogin
aleksey at nogin.org
Thu Apr 15 22:48:59 UTC 2004
On 15.04.2004 15:43, Gene Czarcinski wrote:
> As I currently understand things, only the tunable.te and users files are
> intended for modification by the user or local installation. The rest or the
> files are for policy-sources and will be updated when the package is updated.
> I want some place to put rules similar to those in file_contexts or types.fc
> which will be used to build the master files_contexts but not be replaced
> when policy-sources is updated.
If you put an _additional_ file into the appropriate directory, it
should be picked up by the make scripts and will not be overwritten by
upgrades. For example, I have
/etc/security/selinux/src/policy/domains/misc/local.te for local policy
add-ons and /etc/security/selinux/src/policy/file_contexts/misc/local.fc
for local file_contexts add-ons.
--
Aleksey Nogin
Home Page: http://nogin.org/
E-Mail: nogin at cs.caltech.edu (office), aleksey at nogin.org (personal)
Office: Jorgensen 70, tel: (626) 395-2907
More information about the fedora-selinux-list
mailing list