From ef673f9a03fdaf50044bbf397ab0afa74ba67b3f Mon Sep 17 00:00:00 2001 From: Rahul Sandhu Date: Wed, 8 Jan 2025 12:45:06 +0000 Subject: [PATCH] sec-policy/selinux-base: default to mcs policy type As our own documentation states mcs is the recommended policy type for most users, let's default to mcs in the selinux config file. Closes: https://github.com/gentoo/gentoo/pull/40049 Signed-off-by: Rahul Sandhu Signed-off-by: Jason Zaman --- sec-policy/selinux-base/files/config | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sec-policy/selinux-base/files/config b/sec-policy/selinux-base/files/config index 55933ea0e534e..7b66367667876 100644 --- a/sec-policy/selinux-base/files/config +++ b/sec-policy/selinux-base/files/config @@ -12,4 +12,4 @@ SELINUX=permissive # mls - Full SELinux protection with Multi-Level Security # mcs - Full SELinux protection with Multi-Category Security # (mls, but only one sensitivity level) -SELINUXTYPE=strict +SELINUXTYPE=mcs