Sounds good. I haven't thought about the implementation at all. ________________________________________ From: Stephen Smalley [sds@xxxxxxxxxxxxx] Sent: Friday, September 14, 2012 9:29 AM To: Radzykewycz, T (Radzy) Cc: William Roberts; selinux@xxxxxxxxxxxxx; Craig, Robert P. Subject: Re: Update to docs On Fri, 2012-09-14 at 16:19 +0000, Radzykewycz, T (Radzy) wrote: > There have been a couple times when I wanted to remove a rule from the > system policy for a specific BSP. So I guess I would vote for > override if I need to choose one or the other. But would it be > reasonable to allow both overrides and concatenates ? That would be > my preference. Maybe we could provide two variables definitions in the makefiles, one for policy files that should replace/override and one for policy files that should concatenate/union with the base policy files? -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.