[RFC] change policy loading to initramfs

Bill Nottingham notting at redhat.com
Thu Jan 24 16:11:49 UTC 2008


Stephen Smalley (sds at tycho.nsa.gov) said: 
> Hmm...Chad Sellers was working on similar support for Ubuntu, but did it
> by adding a -i option to the load_policy program to perform an initial
> policy load so that you can just execute it from a script rather than
> requiring a direct patch to nash or anything else.  cc'ing him.  The
> load_policy -i support is upstream and should be in Fedora devel /
> rawhide too.

This would still need to be done chroot()ed into the system (there's no
way to set the base path for filename resoution), correct?

Bill




More information about the fedora-selinux-list mailing list