How to properly upgrade policy
Stephen Smalley
sds at epoch.ncsc.mil
Mon Jun 28 14:39:38 UTC 2004
On Sun, 2004-06-27 at 09:40, tmolina at cablespeed.com wrote:
> My view is that on a user system only policy should be necessary. Being
> able to "fixfiles relabel" would be nice. Changing a file's context would
> be nice, too. My impression is that some/many of the diagnostic programs
> I would like to have are split between policy and policy-sources.
fixfiles, setfiles, and restorecon are part of policycoreutils, not any
selinux-policy-* package. chcon (ala chown/chmod) is part of
coreutils. The installed file_contexts configuration is part of
selinux-policy-* but is also rebuilt by selinux-policy-*-sources. So
you don't need policy sources for relabeling.
--
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency
More information about the selinux
mailing list