post direct-file-modification commands
Steve Friedman
steve at adsi-m4.com
Wed Nov 29 23:41:03 UTC 2006
The various GUI tools are nice for getting a policy configured correctly;
however, to propagate this configuration to a series of like modified
machines one runs into a speed bump.
The files (e.g., booleans.local) state that the semanage command should be
used to modify the file; however, via the GUI I am blissfully unaware of
the actual commands (and would like to remain so).
But, it would seem that it should be perfectly legal to propagate the
various ".local" files directly. If this is legal, what commands must be
issued to cause selinux to read the various policy updates? If this isn't
legal, then what means can be used to propagate the policy?
Steve Friedman
More information about the fedora-selinux-list
mailing list