On Wed, 2005-06-15 at 14:41 -0400, Stephen Smalley wrote:
I'm not sure why you need anything other than a
selinux-policy-strict
package (which contains the binary policy file, the file_contexts
configuration, and other policy-related config files) with a modified
post scriptlet in the spec file to perform the conversion (e.g. switch
to permissive mode, change /etc/selinux/config, load new policy, relabel
filesystems, reboot). Naturally, the devil is in the details; you'll
want to try it on a non-production system first.
BTW, if it is a custom policy (not just the stock Fedora strict policy),
then you should give it another name other than strict and put it under
its own subtree of /etc/selinux to avoid conflicts (and potential
replacement by the Fedora strict policy upon subsequent updates).
--
Stephen Smalley
National Security Agency