selinux January 2010 archive
Main Archive Page > Month Archives  > selinux archives
selinux: What is refpolicy [strict or targeted]

What is refpolicy [strict or targeted]

From: AlannY <m_at_nospam>
Date: Thu Jan 21 2010 - 13:12:09 GMT
To: SELinux@tycho.nsa.gov


Hi there. I'm newbie in SELinux, so I have a lame question.

I know, that SELinux are now not supported all application, so there are 2 different kinds of policy available: strict and targeted.

First one: strict checking. Applications allows only what policy can allow.

Second one (and more intresting for me) is targeted policy: policy will work only on targeted applications.

I'm using Fedora and using targeted policy. But now, I'm trying to setup SELinux on different OS on different machine. So, I'm using raw refpolicy (as is).

But what is refpolicy: strict or targeted. If strict, can I change it to targeted? And how?

Thanks for patience. -- )\._.,--....,'``. /, _.. \ _\ (`._ ,. `._.-(,_..'--(,_..'`-.;.' -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.