Re: Where does semanage store changes?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 07/13/2014 03:38 AM, dE wrote:
> Except when deleting and adding modules (when the main policy binary
> changes; did a checksum to verify that), where are other changes which
> semanage makes (like change boolean values, users, port, interface,
> node) stored?

Ultimately all of the changes you listed have to be stored in the kernel
policy binary since they are part of the kernel policy (unlike, for
example, semanage fcontext or login mappings).  However, they are also
kept in separate configuration files under
/etc/selinux/$SELINUXTYPE/modules/active and merged into the generated
kernel policy after linking and expanding the policy modules together.
Non-kernel configurations such as fcontext or login mappings are stored
in their own respective files, e.g. file_contexts.local and seusers.


_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux