I just noticed there are a bunch of packages in rawhide that have been compiled for use SELinux and I have a couple of questions:
1. Is SELinux planed to be included in FC2?
2. Other than the usual caveats associated with rawhide, are there things that should be watched for/tested?
Thanks,
Gawain
On Mon, Nov 17, 2003 at 04:30:47PM +1100, Gawain Lynch wrote:
I just noticed there are a bunch of packages in rawhide that have been compiled for use SELinux and I have a couple of questions:
Is SELinux planed to be included in FC2?
Other than the usual caveats associated with rawhide, are there
things that should be watched for/tested?
Keep a root shell open and make sure you can login after upgrading to them (login started asking for security contexts for me, which I of course didn't have setup), commenting out pam_selinux.so from /etc/pam.d/login fixed that.
On Mon, Nov 17, 2003 at 04:30:47PM +1100, Gawain Lynch wrote:
- Is SELinux planed to be included in FC2?
Yep!
michaelkjohnson
"He that composes himself is wiser than he that composes a book." Linux Application Development -- Ben Franklin http://people.redhat.com/johnsonm/lad/
On Mon, 2003-11-17 at 14:57, Michael K. Johnson wrote:
On Mon, Nov 17, 2003 at 04:30:47PM +1100, Gawain Lynch wrote:
- Is SELinux planed to be included in FC2?
Yep!
michaelkjohnson
Really? Wow!!
Will this be combined with a default offering for an encrypted file system? :-)
Thanks!
Marc
On Mon, Nov 17, 2003 at 03:18:05PM -0600, Marc Schwartz wrote:
On Mon, 2003-11-17 at 14:57, Michael K. Johnson wrote:
On Mon, Nov 17, 2003 at 04:30:47PM +1100, Gawain Lynch wrote:
- Is SELinux planed to be included in FC2?
Yep!
Really? Wow!!
Yeah, really. Lots of work to do...
I'm not making statements about default policy, just technology.
Will this be combined with a default offering for an encrypted file system? :-)
Not patching in something that's not upstream, I'm sure of that.
michaelkjohnson
"He that composes himself is wiser than he that composes a book." Linux Application Development -- Ben Franklin http://people.redhat.com/johnsonm/lad/
On Mon, 2003-11-17 at 15:30, Michael K. Johnson wrote:
On Mon, Nov 17, 2003 at 03:18:05PM -0600, Marc Schwartz wrote:
On Mon, 2003-11-17 at 14:57, Michael K. Johnson wrote:
On Mon, Nov 17, 2003 at 04:30:47PM +1100, Gawain Lynch wrote:
- Is SELinux planed to be included in FC2?
Yep!
Really? Wow!!
Yeah, really. Lots of work to do...
I'm not making statements about default policy, just technology.
Understood...
Will this be combined with a default offering for an encrypted file system? :-)
Not patching in something that's not upstream, I'm sure of that.
When you say upstream, I presume that you are referring to v2.6 kernel support?
Marc
Hi,
On Mon, 2003-11-17 at 22:38, Marc Schwartz wrote:
Will this be combined with a default offering for an encrypted file system? :-)
Not patching in something that's not upstream, I'm sure of that.
When you say upstream, I presume that you are referring to v2.6 kernel support?
Yes.
--Stephen
On Thu, 2003-11-20 at 05:27, Stephen C. Tweedie wrote:
Hi,
On Mon, 2003-11-17 at 22:38, Marc Schwartz wrote:
Will this be combined with a default offering for an encrypted file system? :-)
Not patching in something that's not upstream, I'm sure of that.
When you say upstream, I presume that you are referring to v2.6 kernel support?
Yes.
--Stephen
Thanks Stephen.
I have seen various comments regarding the crypto API in 2.6, but has there been discussion regarding supporting one or more of the CFS implementations?
Regards,
Marc
-
Gawain Lynch -
Marc Schwartz -
Michael K. Johnson -
Pekka Pietikäinen -
Stephen C. Tweedie