--- nsaserefpolicy/policy/global_tunables 2008-08-07 11:15:13.000000000 -0400 +++ serefpolicy-3.5.5/policy/global_tunables 2008-08-14 13:53:54.000000000 -0400 @@ -34,7 +34,7 @@ ## ##

-## Enable polyinstantiated directory support. +## Allow login programs to use polyinstantiated directories. ##

##
gen_tunable(allow_polyinstantiation,false) @@ -61,15 +61,6 @@ ## ##

-## Allow email client to various content. -## nfs, samba, removable devices, user temp -## and untrusted content files -##

-##
-gen_tunable(mail_read_content,false) - -## -##

## Allow any files/directories to be exported read/write via NFS. ##

##
@@ -129,3 +120,12 @@ ##

## gen_tunable(write_untrusted_content,false) + +## +##

+## Allow direct login to the console device. Required for System 390 +##

+##
+gen_tunable(allow_console_login,false) + +