SELinux in Ac

Jacek Konieczny jajcus at bnet.pl
Sun Nov 14 21:34:12 CET 2004


On Sun, Nov 14, 2004 at 08:56:14PM +0100, Arkadiusz Miskiewicz wrote:
> On Sunday 14 of November 2004 20:28, Jacek Konieczny wrote:
> > I am going to setup a new server. I think about using SELinux there.
> > Is SELinux usable in Ac? I am ready to modify the policy a bit for my
> > needs.
> It almost usable. Userspace selinux tools are ready, some apps are patched to 
> work with selinux, some are not or require patch updates.

What are those apps (or kind of apps) that may need patching?

> I'm currently running enforced targeted policy and it almost works. There are 
> some problems due to our directory layout for example  /home/services is at 
> this moment problematic because for example httpd_t doesn't have access to 
> it.

That seems like it can be easily fixed by customizing the policy. May
a change like that in the policy cause any serious problems, e.g. on
a system update?

Greets,
	Jacek




More information about the pld-devel-en mailing list