On 09/30/2009 01:59 PM, Stephen Smalley wrote: > On Wed, 2009-09-30 at 13:56 -0400, Daniel J Walsh wrote: >> Ubunto and Fedora have moved to a model where the initrd executes load_policy -i. >> >> This means load_policy has to be in /sbin since /usr might not be mounted. > > We had a similar change happen for setfiles, and if you look a little > further down in semanage_conf_init(), you'll see that we call access() > to check whether setfiles lives in /sbin or /usr/sbin and then set it > accordingly. You'll want to do the same thing here to avoid breakage on > systems that still have it in the old location. > Fixed patch.