Re: [gentoo-hardened] Status new selinux reference policy

[Chris PeBenito]

On Fri, 2006-04-14 at 13:42 +0300, Petre Rodan wrote:
> hi,
>
> On Thu, Apr 13, 2006 at 02:43:36PM -0700, Stephen Fromm wrote:
> > On Thu, 2006-04-13 at 22:56 +0300, Petre Rodan wrote:
> > > Hi,
> > >
> > > On Thu, Apr 13, 2006 at 09:34:25PM +0200, Mivz wrote:
> > > > Hello,
> > > >
> > > > I was curious if the new SELinux reference policy is ready for Gentoo?
> > >
> > > no, it's not yet ready. not every policy present in the old sample
> > > policy has been translated yet into modules of the new system. plus
> > > the selinux toolchain is still a moving target and will need time to
> > > mature.
> >
> > How far along is the work to migrate to the reference policy?  I recall
> > a message to this list in December that the migration work had begun and
> > suggested more information would follow.  I poked at bugzilla and didn't
> > find a bugid tracking the status of the reference policy for gentoo.
>
> the following policies are not yet in the current upstream CVS:
>
> asterisk
> clockspeed
> courier-imap
> dante
> jabber-server
> ntop
> openvpn
> qmail
> snort
>
> qmail policy is ready and has been sent upstream. clockspeed, dante,
> courier-imap, jabber-server, openvpn, snort will be translated once I
> get one or two extra servers migrated.
>
> asterisk and ntop should be handled by someone else, since I do not
> use them.

Courier, dante, jabber and snort are done.  Sourceforge had some
hardware failures on the CVS server, so the developer CVS isn't
synchronizing with the public pserver, which is why you can't see it
yet.  I believe a debian guy is doing a openvpn policy.  I'll see if I
can get the remaining policies converted over this weekend.

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243