James Morris (jmorris@xxxxxxxxx) said: > - The local session can now install any signed packages from the Fedora > repos: > > - I think this includes old versions of packages (correct?) Incorrect. > MAC policy can be updated without administrative privilege, breaking our > MAC model in a fundamental way. I'm fairly sure that's wrong as well. Installation of another policy does not override the current one. Bill -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list