Gentoo Archives: gentoo-dev

From: "Anthony G. Basile" <blueness@g.o>
To: Gentoo Development <gentoo-dev@l.g.o>
Subject: [gentoo-dev] Adding a new selinux profile to default/linux/{amd64,x86}/10.0
Date: Wed, 07 Dec 2011 14:08:40
Message-Id: 4EDF732D.2040700@gentoo.org
1 Hi everyone,
2
3 Some time ago the selinux team restructured the selinux profiles and
4 made a features/selinux which could be stacked on the hardened profiles
5 for x86/amd64. At that time I also tested and found that it stacked
6 fine on default/linux/{amd64,x86}/10.0. I'm emailing the list to see if
7 there's any reason why we shouldn't add
8 default/linux/{amd64,x86}/10.0/selinux. Currently I prefer adding it
9 directly to 10.0 rather than 10.0/server because the status of the later
10 is uncertain. Selinux on the desktops is not being strongly supported
11 so its not appropriate there either, leaving only 10.0/selinux. If
12 added eselect profile list would show
13
14 [1] default/linux/amd64/10.0
15 [2] default/linux/amd64/10.0/selinux
16 [3] default/linux/amd64/10.0/desktop
17 [4] default/linux/amd64/10.0/desktop/gnome
18 [5] default/linux/amd64/10.0/desktop/kde
19 [6] default/linux/amd64/10.0/developer
20 [7] default/linux/amd64/10.0/no-multilib
21 [8] default/linux/amd64/10.0/server
22 [9] hardened/linux/amd64 *
23 [10] hardened/linux/amd64/selinux
24 [11] hardened/linux/amd64/no-multilib
25 [12] hardened/linux/amd64/no-multilib/selinux
26
27 Any objections?
28
29 --
30 Anthony G. Basile, Ph.D.
31 Gentoo Linux Developer [Hardened]
32 E-Mail : blueness@g.o
33 GnuPG FP : 8040 5A4D 8709 21B1 1A88 33CE 979C AF40 D045 5535
34 GnuPG ID : D0455535

Replies