Re: list of permissions created by allow2audit: what do i do now?

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Tue, May 18, 2004 at 12:25:51PM -0400, Valdis.Kletnieks@vt.edu wrote:

> On Tue, 18 May 2004 13:02:44 -0000, Luke Kenneth Casson Leighton said:
> 
> >  given the number of errors i am seeing, and given that they won't
> >  go away, perhaps there is some breakdown in communication between
> >  the rules being in the policy.conf file and their application to
> >  packages.
> > 
> >  for example, should i be doing a make relabel every time i add
> >  some new rules?
> 
> If you add new *rules* (allow foo_t bar_t...), you need to do a 'make reload'
> to get the new policy in place.
> 
> If you add new file contexts, that requires a 'make relabel'.
> 
> Remember :  *.te changes -> make reload;  *.fc changes -> make relabel.
 
 ta.

> (If you're clever, you'll invoke setfiles by hand so you only relabel the
> file system(s) you need to - if all the stuff you need is on /usr, you don't
> need to redo all the other file systems...)

i'd noticed the technique employed by /etc/dpkg/postinst.d/selinux.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.