On Sun, Jan 16, 2011 at 11:57:36PM +0000, Adam D. Barratt wrote: > On Mon, 2011-01-17 at 10:06 +1100, Russell Coker wrote: > > The following patch fixes many issues with the SE Linux policy that were > > discovered after the release of Lenny. It also supports using the Squeeze > > kernel which is really useful for virtual servers that have Lenny DomU and > > Squeeze Dom0. > The basic standard for a stable update is that it fixes important bugs > and does so in the most minimal way possible. That's one of them. The other one is "don't break existing systems", which I fear might happen for users of refpolicy if it's upgraded behind their back, no? > comprising 2.5 years of uploads really meets that criteria, particularly > for what may be the last point release for lenny as the stable release. I tend to say it's too late for this change. In this particular case people will already have been accustomed to the bugs it entails, and fixed them locally if they need to. Suddenly introducing a new policy without a very strong reason (aka "breaks the system", "security problems", etc.) doesn't look like a sane thing to do to me. Kind regards Philipp Kern
Attachment:
signature.asc
Description: Digital signature