Adding local nodecons

[Stephen Smalley]

On Wed, 2008-07-02 at 12:03 +0200, Christian Kuester wrote:
> Hi List,
> 
> I'm using Fedora 8 and would like to put types on various nodes.
> What would be the best way to do it since semanage seems to support
> doing nodecons on specific nodes.
> 
> Do I have to rebuild the complete policy or is there some more convienent
> way to do it? For example in a new local policy?

I don't believe this is presently supported by semanage, although the
libsemanage infrastructure exists.

However, I think what you likely want is to use secmark instead.
http://james-morris.livejournal.com/11010.html

-- 
Stephen Smalley
National Security Agency