Well, when I installed policy-strict-sources, it replaced the files
from the policy-sources package. Surprise! I would have thought in
would have installed them under
/etc/security/selinux/src/policy-strict. I hope we will be able to
have both (or more) policies sources installed at the same time.
If I rename src/policy to src/policy-strict can I then reinstall
policy-sources? what rpm options should I use?
Thanks for the help
Yes that was a mistake that it got out. I am working on a new version
of the policy src rpm. It will create 4 rpms. policy and
policy-sources which will contain the targeted policy (relaxed) policy.
policy-strict and policy-strict-sources which will contain the strict
policy (The policy we currently ship). This should be available in the
first rawhide versions of FC3. Policy sources will install in
/etc/security/selinux/targeted/src/policy. Strict policy sources will
install in /etc/security/selinux/strict/src/policy.
Will there be any way to determine which policy is currently active?
am concerned that the well known location for the policy source
(/etc/security/selinux/src/policy/) will go away and break tools that
it. All of our tools are configurable, of course, but this change will
it hard to provide good configuration defaults. What about making
/etc/security/selinux/src/policy a symlink to the currently active
(410)290-1411 ext 134