Re: Portage-related AVCs
Robert Sharp <selinux-/[email protected]> Wed, 23 Nov 2016 16:59:03 +0000
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On 23/11/16 15:58, Jason Zaman wrote: > Either is fine, but im probably just gonna stabilize the 2.6 userspace > in a couple weeks so that one is likely easier. and setools4 is waaay > better than 3. The important point is that you dont want to have both > policy.29 and policy.30 around. Then you get weirdness like if you > downgrade a kernel or something random it'll load in the old policy > which probably doesnt work properly, so whichever you pick, make sure > you nuke the other one. and semodule -B will rebuild the whole policy > again and load it. OK - I will go with policy.30 and add the keywords etc. I did a couple of local policy changes that may not be needed so will they disappear in all of this or do I need to remove them somehow first? Thanks for all your help, Robert