How to properly upgrade policy

[Stephen Smalley]

On Sun, 2004-06-27 at 09:40, tmolina at cablespeed.com wrote:
> My view is that on a user system only policy should be necessary.  Being 
> able to "fixfiles relabel" would be nice.  Changing a file's context would 
> be nice, too.  My impression is that some/many of the diagnostic programs 
> I would like to have are split between policy and policy-sources.

fixfiles, setfiles, and restorecon are part of policycoreutils, not any
selinux-policy-* package.  chcon (ala chown/chmod) is part of
coreutils.  The installed file_contexts configuration is part of
selinux-policy-* but is also rebuilt by selinux-policy-*-sources.  So
you don't need policy sources for relabeling.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency