On Thu, 2005-11-03 at 09:02 -0500, Ivan Gyurdiev wrote: > > Check the state of the "direct_sysadm_daemon" tunable... > > I think it should be set to 1 in your case. I am not quite sure of the > > justification for a tunable. > Or rather.. maybe it needs to be defined in the sources package from > which policy is built. > I always get confused as to whether or not tunables can be changed at > runtime - IIRC they can't. In the current policy, tunables are compile-time (handled via m4 macro expansion) and booleans are runtime (handled via policy language support for conditional TE rules). -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
