Hi,
I would like to know what's the difference between the two booleans provided in the title. Is there any documentation that I could check? Is any of them needed when I'd like to have poly-instantiated directories with SELinux in enforcing mode?
Google search produced this (1st link):https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/htm... On Monday, June 6, 2022, 07:01:59 AM EDT, Iker Pedrosa ipedrosa@redhat.com wrote: Hi,
I would like to know what's the difference between the two booleans provided in the title. Is there any documentation that I could check? Is any of them needed when I'd like to have poly-instantiated directories with SELinux in enforcing mode? _______________________________________________ selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.or... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Hi Joe,
Thanks for the link but I'm afraid that it doesn't explain what's the difference between the two booleans.
On Mon, Jun 6, 2022 at 3:27 PM Joe Wulf joe_wulf@yahoo.com wrote:
Google search produced this (1st link):
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/htm...
On Monday, June 6, 2022, 07:01:59 AM EDT, Iker Pedrosa < ipedrosa@redhat.com> wrote:
Hi,
I would like to know what's the difference between the two booleans provided in the title. Is there any documentation that I could check? Is any of them needed when I'd like to have poly-instantiated directories with SELinux in enforcing mode? _______________________________________________ selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.or... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
On Mon, Jun 6, 2022 at 1:01 PM Iker Pedrosa ipedrosa@redhat.com wrote:
Hi,
I would like to know what's the difference between the two booleans provided in the title. Is there any documentation that I could check? Is any of them needed when I'd like to have poly-instantiated directories with SELinux in enforcing mode?
Hi Iker, polyinstantiation_enabled is used in selinux-policy in Fedora whereas allow_polyinstantiation is in refpolicy. The content is not completely the same, but is similar. Fedora policy used to be based on refpolicy, but they started to diverge quite some time ago.
https://github.com/fedora-selinux/selinux-policy.git https://github.com/SELinuxProject/refpolicy.git
_______________________________________________
selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.or... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
selinux@lists.fedoraproject.org
-
Iker Pedrosa -
Joe Wulf -
Zdenek Pytela