1. Is there supposed to be an environment variable $SELINUXTYPE? I don't have one... 2. When I do "make load", the policy file in /etc/selinux/refpolicy-standard/policy/policy.24 is replaced (at least, it gets a new timestamp). /etc/selinux/config contains: SELINUX=permissive SELINUXTYPE=refpolicy-standard 3. ls -l /etc/selinux/refpolicy-standard/policy -rw-r--r--. 1 root root 3686162 Feb 17 16:05 policy.24 4. cat /selinux/policyvers <nothing>... File is empty 5. checkpolicy -V 24 (compatibility range 24-15) -----Original Message----- From: Stephen Smalley [mailto:sds@xxxxxxxxxxxxx] Sent: Wednesday, February 17, 2010 4:10 PM To: Alan Rouse Cc: 'selinux@xxxxxxxxxxxxx' Subject: RE: SELinux Policy in OpenSUSE 11.2 The fact that the setsebool -P isn't persisting across reboot suggests that you are not in fact loading the policy that you think you are. ls -l /etc/selinux/$SELINUXTYPE/policy cat /selinux/policyvers checkpolicy -V -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
