Re: Policycoreutils latest diffs.

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:
> 
>>> But I thought we were only going to allow modifying of local stuff.  
>>> Do we want a user to be able to modify the SELinux USER Root or 
>>> user_u?  I don't think so.
>>>
>> why not? that is a fairly arbitrary decision, maybe we shouldn't allow 
>> them to modify the ssh port either?
> 
> Speaking of overriding things, is it currently possible to override the 
> entire ethereal security module, for example?
> Is there a modules.local? It's always been my opinion that modules 
> should be just another record type, and the fs directory should be just 
> another backend to the database...
> 
> 
I really don't want to get into this again. Generalizing module store 
for the sake of doing so would be a tremendous waste of time. The policy 
server will allow transfering of the binary modules to machines over the 
network (with access control) so why would they ever need to be stored 
in some other medium.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.