From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 05 Mar 2009 11:09:56 -0500
Subject: [refpolicy] appconfig-mcs_default_contexts.patch
In-Reply-To: <49AFF828.70402@redhat.com>
References: <49AFF828.70402@redhat.com>
Message-ID: <1236269396.26944.111.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2009-03-05 at 11:04 -0500, Daniel J Walsh wrote:
> http://people.fedoraproject.org/~dwalsh/SELinux/F11/appconfig-mcs_default_contexts.patch
> 
> Rewriting default_context to default to user_t.

I have to pass on this one.  It'll break any user that doesn't have a
user-specific default_contexts file and doesn't have the user_r role.
The global default_contexts needs to remain generic.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150