James Morris (jmor...@namei.org) said: 
>  - The local session can now install any signed packages from the Fedora 
>    repos:
> 
>     - I think this includes old versions of packages (correct?)

Incorrect.

> MAC policy can be updated without administrative privilege, breaking our 
> MAC model in a fundamental way.

I'm fairly sure that's wrong as well. Installation of another policy
does not override the current one.

Bill

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list

Reply via email to