Thanks everyone for the rapid answers. I was able to restore the file. Kim -----Original Message----- From: Stephen Smalley [mailto:sds@xxxxxxxxxxxxx] Sent: Friday, March 21, 2014 9:35 AM To: kim.lawson-jenkins@xxxxxxxxxxxx; selinux@xxxxxxxxxxxxx Subject: Re: How to restore a policy module On 03/21/2014 09:32 AM, Stephen Smalley wrote: > On 03/21/2014 09:29 AM, Kim Lawson-Jenkins wrote: >> In an attempt to lockdown a system I removed the remotelogin policy >> module using semodule -r. I'm using the targeted policy on RHEL6. >> How do I add this file back to my current configuration? > > You can always do a yum reinstall selinux-policy-targeted to fully > reinstall the policy, or you could individually install that policy > module. Used to be the case that a copy of each module was available > under /usr/share/selinux/targeted, so you could do a semodule -i > /usr/share/selinux/targeted/remotelogin.pp if that exists (but it > seems to have gone away in recent Fedora, likely to save on storage). Also, if you add: save-previous = true to your /etc/selinux/semanage.conf it will keep a copy of your previous policy under /etc/selinux/targeted/modules/previous on each transaction, making it easier to rollback changes. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
