Re: policy packages

[Daniel J Walsh]

Karl MacMillan wrote:

> >-----Original Message-----
> >    
> >
> >>Well, when I installed policy-strict-sources, it replaced the files
> >>from the policy-sources package. Surprise! I would have thought in
> >>would have installed them under
> >>/etc/security/selinux/src/policy-strict. I hope we will be able to
> >>have both (or more) policies sources installed at the same time.
> >>If I rename src/policy to src/policy-strict can I then reinstall
> >>policy-sources? what rpm options should I use?
> >>Thanks for the help
> >>Richard Hally
> >>      
> >>
> >Yes that was a mistake that it got out.  I am working on a new version
> >of the policy src rpm.  It will create 4 rpms.  policy and
> >policy-sources which will contain the targeted policy (relaxed) policy.
> >policy-strict and policy-strict-sources which will contain the strict
> >policy (The policy we currently ship).  This should be available in the
> >first rawhide versions of FC3.   Policy sources will install in
> >/etc/security/selinux/targeted/src/policy.  Strict policy sources will
> >install in /etc/security/selinux/strict/src/policy.
> >
> >    
> >
>
> Will there be any way to determine which policy is currently active? Also, I
> am concerned that the well known location for the policy source
> (/etc/security/selinux/src/policy/) will go away and break tools that expect
> it. All of our tools are configurable, of course, but this change will make
> it hard to provide good configuration defaults. What about making
> /etc/security/selinux/src/policy a symlink to the currently active policy?
>
> Karl
>
> Karl MacMillan
> Tresys Technology
> http://www.tresys.com
> [phone] ext 134
>
>   
>
> >Dan
> >
> >    
> >
> >>--
> >>fedora-selinux-list mailing list
> >>fedora-selinux-list(a)redhat.com
> >>http://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >>      
> >>
> >--
> >fedora-selinux-list mailing list
> >fedora-selinux-list(a)redhat.com
> >http://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >    
> >
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list(a)redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   
>  
We could change a sym link.  We were thinking of using 
/etc/sysconfig/selinux to specify which policy is in use, and where the 
directories are.  Right now I am just trying to get the SRPM to build 
both policy groups.  The only tools that should be affected are those 
that deal with the src dir, which is the SEtools.