| Main Archive Page > Month Archives > selinux archives |
Re: Policy loading problem
From: Stephen Smalley <sds_at_nospam>Date: Wed May 20 2009 - 14:09:56 GMT
To: Dennis Wronka <linuxweb@gmx.net>
On Wed, 2009-05-20 at 22:07 +0800, Dennis Wronka wrote:
> Sorry I got to ask, but what do you actually mean by "initial policy loading
> logic"?
>
> I haven't actually written any code that handles the policy. I took the
> attached patch for SysVInit and applied it. From what I know this is the
> commonly used patch for this, as it seems to be pretty identical wherever I'm
> looking.
That's what I wanted to see, thanks.
Now, if you boot permissive in single-user mode (enforcing=0 single) and run "load_policy -i" (note the -i option), does that work? That calls the same function for initial policy loading as the patch for sysvinit. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.