On Wed, 2013-02-06 at 08:25 +0530, Lakshmipathi.G wrote: > > One more question, what's the usage of 'optional_policy' in above > te file? > It takes care of dependencies. For example without the optional policy rules you would not be able to disable or remove either the mysqld or guest policy module. because there is a dependency. the mytest policy module depends on them. but now since the rules are wrapped in optional policy you will still be able to disable the mysqld and guest modules if you so desire basically it tells selinux, use these rules if you can and if you cannot then no problem. The reason i wrapped it in optional policy is that if you ever for some reason want to disable or remove mysqld or guest modules you will be able to do so easily and you wont get any cryptic messages about dependencies -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
