-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/29/2013 11:20 AM, John Reiser wrote: >>>> A generic fallback image should be installed by anaconda on >>>> installation/update and never ever be removed. > >> Also, fallback has interesting security properties… > > > "Rescue mode" forces a SELinux relabel at the next boot, and relabel can > take a very long time. > > How does "fallback mode" handle this, particularly if there have been > updates to SELinux policy after the fallback was created? > The reason for this is we do not know what files were created on the system while SELinux was disabled (Policy Not Loaded). If you know you did not created files on the system you could remove the /.autorelabel file and boot without a relabel. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEIFNgACgkQrlYvE4MpobPO/ACfcYzgUaDdnQj/Kdj2lyqCDhbu ENEAoIZLa3xWD0O+nB/bGg+pVFAfHbPN =3yRB -----END PGP SIGNATURE----- -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel
