polyinstantiation_enabled vs allow_polyinstantiation

[Iker Pedrosa]

Hi,

I would like to know what's the difference between the two booleans provided in the
title. Is there any documentation that I could check? Is any of them needed when I'd
like to have poly-instantiated directories with SELinux in enforcing mode?

[Joe Wulf]

 Google search produced this (1st
link):https://access.redhat.com/documentation/en-us/red_hat_enterprise_li...
    On Monday, June 6, 2022, 07:01:59 AM EDT, Iker Pedrosa <ipedrosa(a)redhat.com&gt;
wrote:  
 Hi,

I would like to know what's the difference between the two booleans provided in the
title. Is there any documentation that I could check? Is any of them needed when I'd
like to have poly-instantiated directories with SELinux in enforcing mode?
_______________________________________________
selinux mailing list -- selinux(a)lists.fedoraproject.org
To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]...
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Iker Pedrosa]

Hi Joe,

Thanks for the link but I'm afraid that it doesn't explain what's the
difference between the two booleans.

On Mon, Jun 6, 2022 at 3:27 PM Joe Wulf <joe_wulf(a)yahoo.com&gt; wrote:

>  Google search produced this (1st link):
>
>
> https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/...
>
>  On Monday, June 6, 2022, 07:01:59 AM EDT, Iker Pedrosa <
>  ipedrosa(a)redhat.com&gt; wrote:
>
>  Hi,
>
>  I would like to know what's the difference between the two booleans
>  provided in the title. Is there any documentation that I could check? Is
>  any of them needed when I'd like to have poly-instantiated directories with
>  SELinux in enforcing mode?
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>  

-- 

Iker Pedrosa

Software Engineer, Identity Management team

Red Hat <https://www.redhat.com>

Txapela (gorria) buruan eta ibili munduan

(Red) hat on his head and walk the world

Basque proverb
<https://www.redhat.com>

[Zdenek Pytela]

On Mon, Jun 6, 2022 at 1:01 PM Iker Pedrosa <ipedrosa(a)redhat.com&gt; wrote:

>  Hi,
>
>  I would like to know what's the difference between the two booleans
>  provided in the title. Is there any documentation that I could check? Is
>  any of them needed when I'd like to have poly-instantiated directories with
>  SELinux in enforcing mode?
>  
Hi Iker,
polyinstantiation_enabled is used in selinux-policy in Fedora whereas
allow_polyinstantiation is in refpolicy. The content is not completely the
same, but is similar.
Fedora policy used to be based on refpolicy, but they started to diverge
quite some time ago.

https://github.com/fedora-selinux/selinux-policy.git
https://github.com/SELinuxProject/refpolicy.git

_______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure
>  

-- 

Zdenek Pytela
Security SELinux team