commit:     ef673f9a03fdaf50044bbf397ab0afa74ba67b3f
Author:     Rahul Sandhu <rahul <AT> sandhuservices <DOT> dev>
AuthorDate: Wed Jan  8 12:45:06 2025 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Mar  8 22:45:26 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ef673f9a

sec-policy/selinux-base: default to mcs policy type

As our own documentation states mcs is the recommended policy type for
most users, let's default to mcs in the selinux config file.

Closes: https://github.com/gentoo/gentoo/pull/40049
Signed-off-by: Rahul Sandhu <rahul <AT> sandhuservices.dev>
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 sec-policy/selinux-base/files/config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sec-policy/selinux-base/files/config 
b/sec-policy/selinux-base/files/config
index 55933ea0e534..7b6636766787 100644
--- a/sec-policy/selinux-base/files/config
+++ b/sec-policy/selinux-base/files/config
@@ -12,4 +12,4 @@ SELINUX=permissive
 #      mls      - Full SELinux protection with Multi-Level Security
 #      mcs      - Full SELinux protection with Multi-Category Security 
 #                 (mls, but only one sensitivity level)
-SELINUXTYPE=strict
+SELINUXTYPE=mcs

Reply via email to