Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Gentoo: Hardened

Heads-up on SELinux profile update

 

 

Gentoo hardened RSS feed   Index | Next | Previous | View Threaded


swift at gentoo

Jun 18, 2012, 12:15 PM

Post #1 of 2 (150 views)
Permalink
Heads-up on SELinux profile update

Hi guys,

In reply to bug #414785, I'm going to make the following change to the
SELinux profile. If that isn't okay, just let me know.

Reasoning:
- the three packages should not be hard-set as requirements (definitely not
for SELinux, so if they are, that should be inherited from the parent
profile)
- the util-linux and pam package versions are already quite old (stable
versions are a lot higher than those) and I don't see a need to fix
util-linux and pam in the system set for SELinux

I'll pun them in a few days if there are no objections.

Wkr,
Sven Vermeulen


Index: packages
===================================================================
RCS file: /var/cvsroot/gentoo-x86/profiles/features/selinux/packages,v
retrieving revision 1.2
diff -u -B -r1.2 packages
--- packages 9 Aug 2011 04:29:55 -0000 1.2
+++ packages 18 Jun 2012 19:12:03 -0000
@@ -2,18 +2,6 @@
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/packages,v 1.2 2011/08/09 04:29:55 zmedico Exp $

-# This file extends the base packages file for the default profile that all
-# architectures will enjoy. Please note that default is what most architectures
-# will have. Some will have an selinux profile (see ${PORTDIR}/profiles/selinux).
-# The idea is to only create a new family of profiles when absolutely necessary.
-
-*sys-apps/busybox
-*sys-apps/hdparm
-*sys-apps/man-pages
-
-##############################################################################
-# Basic SELinux required versionings
-
# Base SELinux packages
*sys-libs/libsepol
*sys-libs/libselinux
@@ -21,7 +9,3 @@
*sys-apps/checkpolicy
*sys-apps/policycoreutils
*sec-policy/selinux-base-policy
-
-# SELinux-aware packages
-*>=sys-apps/util-linux-2.12
-*>=sys-libs/pam-0.77


swift at gentoo

Jun 20, 2012, 7:43 AM

Post #2 of 2 (130 views)
Permalink
Re: Heads-up on SELinux profile update [In reply to]

On Mon, Jun 18, 2012 at 07:15:00PM +0000, Sven Vermeulen wrote:
> In reply to bug #414785, I'm going to make the following change to the
> SELinux profile. If that isn't okay, just let me know.

"Everything is proceeding as I have foreseen"

Gentoo hardened RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.