-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Murray McAllister wrote:
Hi,
If I change a lot of booleans, or install a lot of custom policies, is
there any way to restore selinux policy (targeted) to its default
configuration?
Thanks.
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list Well semanage does have
a -D option to remove all local customizations
for the object
man semanage
...
-D, --deleteall
Remove all OBJECTS local customizations
Example:
semanage ports -D
Would remove all port changes.
There is no way to do this with modules currently.
You could look at the modules in /usr/share/selinux/targeted/*.pp
and compare them to semodule -l to see any modules that were different
and use semodule -r MODNAME to remove them.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org
iEYEARECAAYFAkjQ87gACgkQrlYvE4MpobMHigCfXrph1KpagtXk2EbwYrsGTrjb
c3YAn04JaTzLSTanFK5irxBC1mBKlmAh
=wNCb
-----END PGP SIGNATURE-----