From: sds@tycho.nsa.gov (Stephen Smalley)
Date: Tue, 26 Jan 2010 08:40:34 -0500
Subject: [refpolicy] Building MLS/MCS policy
In-Reply-To: <201001252234.o0PMY10H005610@vivaldi37.register.it>
References: <201001252234.o0PMY10H005610@vivaldi37.register.it>
Message-ID: <1264513234.19890.16.camel@moss-pluto.epoch.ncsc.mil>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Mon, 2010-01-25 at 23:34 +0100, Guido Trentalancia wrote:
> Hold on actually...
> 
> It rebooted with the same standard policy and not with the MCS policy.
> 
> Hmmm... This problem is persisting ! What should I do ?

Yes, that makes sense - when libsemanage couldn't load the MCS policy,
it rolled back to the previous one.

What you need to do is to install the MCS policy to a different policy
store (change NAME= in build.conf), then change your /etc/selinux/config
to point to that store, then reboot.

-- 
Stephen Smalley
National Security Agency