On Wed, 2005-06-15 at 14:41 -0400, Stephen Smalley wrote: > I'm not sure why you need anything other than a selinux-policy-strict > package (which contains the binary policy file, the file_contexts > configuration, and other policy-related config files) with a modified > post scriptlet in the spec file to perform the conversion (e.g. switch > to permissive mode, change /etc/selinux/config, load new policy, relabel > filesystems, reboot). Naturally, the devil is in the details; you'll > want to try it on a non-production system first. BTW, if it is a custom policy (not just the stock Fedora strict policy), then you should give it another name other than strict and put it under its own subtree of /etc/selinux to avoid conflicts (and potential replacement by the Fedora strict policy upon subsequent updates). -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list
