From: dwalsh@redhat.com (Daniel J Walsh)
Date: Thu, 25 Sep 2008 16:12:53 -0400
Subject: [refpolicy] admin_firstboot.patch
In-Reply-To: <200809251713.11227.russell@coker.com.au>
References: <48DAA8FF.3000509@redhat.com>
	<200809251713.11227.russell@coker.com.au>
Message-ID: <48DBF0C5.4040908@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

Russell Coker wrote:
> On Thursday 25 September 2008 06:54, Daniel J Walsh <dwalsh@redhat.com> wrote:
>> http://people.fedoraproject.org/~dwalsh/SELinux/F10/admin_firstboot.patch
>>
>> Remove TODO, If we have not done it yet we should forgetabout it
>>
>> Needs to run as an xserver_unconfined
> 
> What is the point of having a firstboot_t?  Why not just make it a typealias 
> for unconfined_t?
> 
Probably not, although there may be some transitions for firstboot_t
which are not there for unconfined_t.  Both are unconfined domains.