On Thu, 2004-04-01 at 08:30 -0500, Stephen Smalley wrote: > What userland bits caused a problem, so that we can avoid similar > problems in the future? Compatibility should have been preserved: > - the new kernel included code to accept either the new or old policy > format > - checkpolicy already included support for generating either policy > format > - SysVinit already included support for loading either policy format anaconda loads the policy specified in policyvers _only_. Otherwise, there's the fun question of how far back you go. Also, doing "fall back a version" things mean that you can _never_ change in a way that's not backwards compatible. Jeremy