Re: Portage-related AVCs

On 23/11/16 16:59, Robert Sharp wrote:
>
> On 23/11/16 15:58, Jason Zaman wrote:
>> Either is fine, but im probably just gonna stabilize the 2.6 userspace
>> in a couple weeks so that one is likely easier. and setools4 is waaay
>> better than 3. The important point is that you dont want to have both
>> policy.29 and policy.30 around. Then you get weirdness like if you
>> downgrade a kernel or something random it'll load in the old policy
>> which probably doesnt work properly, so whichever you pick, make sure
>> you nuke the other one. and semodule -B will rebuild the whole policy
>> again and load it.
> OK - I will go with policy.30 and add the keywords etc. I did a couple 
> of local policy changes that may not be needed so will they disappear 
> in all of this or do I need to remove them somehow first?
>
> Thanks for all your help,
> Robert
>
Sorry - noticed a couple of things while preping the emerge:

1) selinux-base-policy is blocking policycoreutils so presumably I need 
to add that to my accept_keywords?
2) this package has the "unconfined" use flag set but I don't use 
unconfined. Does that matter?

Thanks again,
Robert