[refpolicy] admin_firstboot.patch

Daniel J Walsh dwalsh at redhat.com
Thu Sep 25 15:12:53 CDT 2008


Russell Coker wrote:
> On Thursday 25 September 2008 06:54, Daniel J Walsh <dwalsh at redhat.com> wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F10/admin_firstboot.patch
>>
>> Remove TODO, If we have not done it yet we should forgetabout it
>>
>> Needs to run as an xserver_unconfined
> 
> What is the point of having a firstboot_t?  Why not just make it a typealias 
> for unconfined_t?
> 
Probably not, although there may be some transitions for firstboot_t
which are not there for unconfined_t.  Both are unconfined domains.



More information about the refpolicy mailing list