[HEADS UP] SELinux policy store migration in Rawhide

[Petr Lautrbach]

Hi everybody,

we will do an update of SELinux userspace tools
to 2015-02-02 release and selinux-policy packages as it was proposed in
"SELinux policy store migration" Fedora system wide change [1].

What does it mean for you:

1. You use only Fedora default SELinux policy.

You shouldn't notice any change but some performance improvements during
regular policy updates.

2. You have local changes in policy like changed booleans, adjusted SELinux
users, added or changed port or file contexts definitions made via
"semanage" command.

You shouldn't notice any change. All local modifications should be handled
by migration process during packages update.

You can backup your setting using the command below before the update
will happen.

# semanage export -f semanage.mods

3. You have your local SELinux policy modules

You shouldn't notice any change again. All modules should be migrated
during selinux-policy update.

Some of modules could be incompatible with the new policy so they'll
need to be migrated manually. If they are part of any Fedora package,
we will help with the migration. Just file a bug to a component and
add us do CC field.

We are ready to help with other modules or issues with migration on
selinux(a)lists.fedoraproject.org mailing list.


[1] https://fedoraproject.org/wiki/Changes/SELinuxPolicyStoreMigration

Petr
-- 
Petr Lautrbach