On Fri, 2012-09-14 at 16:19 +0000, Radzykewycz, T (Radzy) wrote: > There have been a couple times when I wanted to remove a rule from the > system policy for a specific BSP. So I guess I would vote for > override if I need to choose one or the other. But would it be > reasonable to allow both overrides and concatenates ? That would be > my preference. Maybe we could provide two variables definitions in the makefiles, one for policy files that should replace/override and one for policy files that should concatenate/union with the base policy files? -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
