Tim wrote:
Tim:
Ignoring all updates to SELinux (add exlude rules to yum.conf).
Tom Horsley:
I'd assume that would quickly break down as the things that depend on it decided they needed newer versions installed.
Try it, and see. I don't see too many changes to the SELinux policy files (*its* default rules, etc.), I don't recall it forcing other things to update at the same time. There's only four obvious SELinux packages on my system:
[tim@bigblack ~]$ rpm -qa *selinux* libselinux-2.0.13-1.fc7 selinux-policy-targeted-2.6.4-21.fc7 libselinux-python-2.0.13-1.fc7 selinux-policy-2.6.4-21.fc7
rpm -qa *policy* libse* libsepol-2.0.4-1.fc8 checkpolicy-debuginfo-2.0.3-1.fc8 selinux-policy-3.0.1-3.fc8 libsemanage-debuginfo-2.0.3-1.fc7 policycoreutils-2.0.22-3.fc8 libselinux-python-2.0.22-1.fc8 libsemanage-devel-2.0.3-3.fc8 libsepol-devel-2.0.4-1.fc8 libsexy-0.1.11-1.fc7 policycoreutils-gui-2.0.22-3.fc8 libsepol-debuginfo-2.0.3-1.fc7 policycoreutils-debuginfo-2.0.19-4.fc8 libselinux-devel-2.0.22-1.fc8 selinux-policy-targeted-3.0.1-3.fc8 checkpolicy-2.0.3-2.fc8 libselinux-debuginfo-2.0.21-2.fc8 selinux-policy-devel-3.0.1-3.fc8 libselinux-2.0.22-1.fc8 libsemanage-2.0.3-3.fc8 policycoreutils-newrole-2.0.22-3.fc8