On Thu, 2005-03-31 at 07:23 -0500, Ivan Gyurdiev wrote: > > How come it's disable_games in strict/booleans, but disable_games_trans in the > > policy? > > disable_games_trans is correct, the file's probably out of date. > > How come some of those booleans are set to 0 by default - doesn't > that match the selinux policy? Is the booleans file supposed to > override the src defaults? If so, shouldn't there be only 1s in that > file (since the src defaults are all 0)? > > Also, the securitylevel app marks things "Changed" every time I toggle > them. It seems like it would be better if it marked thigs back to > "Unchanged" when I toggled them back, to prevent it from writing out > every random thing I toggle into booleans.local, whether or not I change > it back to where it was. > > Also, my old booleans file went to booleans.rpmsave. Does that mean that > my booleans will be reset upon reboot? If so, should the %post script do > something about that to address upgrade path from FC3->FC4? Also, should the post script remove nonexistent booleans from booleans.local upon upgrade? -- Ivan Gyurdiev <ivg2@xxxxxxxxxxx> Cornell University
