Installing new policy?

Paul Nasrat pauln at truemesh.com
Mon Mar 8 16:06:06 UTC 2004


On Mon, Mar 08, 2004 at 11:07:43AM -0500, Bill Nottingham wrote:
> Tom Mitchell (mitch48 at sbcglobal.net) said: 
> > If I understand this...
> > 
> > In development cycles having the "current" best practice policy does make sense
> > for some,  but not outside the context of "default policy development".
> 
> Yes, but if you're pushing new policy that actually fixes bugs
> (think post-release here), you'd want that automatically installed
> on upgrade.

I believe Jeff was working on this, however the hooks would have to be in rpm I
imagine as you probably don't want rpm_script_t having write access to
policy_src_t right?

Paul




More information about the selinux mailing list