selinux eradicator?

Rahul Sundaram sundaram at fedoraproject.org
Thu Jun 28 11:49:56 UTC 2007


Tim wrote:
> On Wed, 2007-06-27 at 11:26 +0000, Tom Horsley wrote:
>> P.P.S. Trying to remove everything except libselinux doesn't work,
>> it still insists on removing every rpm on the system. Trying again
>> with all the other lib-whatever packages associated with selinux
>> give the same results. It acts a lot like everything depends on
>> every selinux package.
> 
> There's a bit of a circular dependency.  Applications *have* to be
> SELinux aware so that files are created with proper contexts for when
> SELinux is used.

Very few applications need to be explicitly SELinux aware and those are 
the core system application that manage policy. Rest of them 
automatically get a context based on a central policy.

Rahul




More information about the users mailing list