From dd6d81a0f34b912a1670e45d842b155cda9c8821 Mon Sep 17 00:00:00 2001 From: Stephen Smalley Date: Fri, 11 Feb 2011 16:07:08 -0500 Subject: [PATCH] Change build.conf to default to modular policy builds Change build.conf to default to modular policy builds rather than monolithic policy builds. Rationale: All modern Linux distributions that incorporate SELinux support have switched to using modular policy, and many of the policy tools (semodule, semanage, and even modern versions of setsebool) only work if using modular policy. Signed-off-by: Stephen Smalley --- build.conf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/build.conf b/build.conf index d13e23628..5a521c46b 100644 --- a/build.conf +++ b/build.conf @@ -44,9 +44,9 @@ NAME = refpolicy # not work in conditional policy. DIRECT_INITRC = n -# Build monolithic policy. Putting n here -# will build a loadable module policy. -MONOLITHIC = y +# Build monolithic policy. Putting y here +# will build a monolithic policy. +MONOLITHIC = n # User-based access control (UBAC) # Enable UBAC for role separations.