On Thu, 2004-04-01 at 08:30 -0500, Stephen Smalley wrote:
What userland bits caused a problem, so that we can avoid similar problems in the future? Compatibility should have been preserved:
- the new kernel included code to accept either the new or old policy
format
- checkpolicy already included support for generating either policy
format
- SysVinit already included support for loading either policy format
anaconda loads the policy specified in policyvers _only_. Otherwise, there's the fun question of how far back you go. Also, doing "fall back a version" things mean that you can _never_ change in a way that's not backwards compatible.
Jeremy