Re: Trivial debian bootscript for selinuxfs on 2.6

[Dale Amon <amon@vnl.com>]

On Wed, Sep 17, 2003 at 08:36:48PM +1000, Russell Coker wrote:
> I suggest also reloading the policy in the same script (see my previous 
> message about initrd policy).

No problem. I actually had it there but decided it was
redundant and removed it. I'll add it back since I 
really had not strong feelings about it.

If the policy version changes from policy.15, presumably 
there is a package update anyway, so that doesn't seem
a problem.
 
> It has occurred to me that if you were to use a NBD or similar device for a 
> root fs then you might want to do a pivot_root in the shutdown to umount root 
> properly, and therefore umounting any file systems under / will be helpful.

But how would you know whether you needed to re-pivot 
or not? What if you have booted your maintenance kernel
or some other that doesn't pivot? The boot script would
have to recognize that. I haven't got the test machine
booted at the moment so I can't check it the initrd mount
has a unique feature that you can find in /proc/mounts.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.