Re: [gentoo-hardened] Call for policy and devs (was: qmail on selinux)

[Michael Reilly]

Hi,

I might have some policies for you.  I fixed the NSA policies to work on a
slackware distro I had lying around.  Having finished that I am moving them
to my gentoo system.

Do you have any guidelines for things like supported roles (I have user_r,
staff_r, sysadm_r and am integrating portage from the gentoo policy)?

I also notice that gentoo sets up the user's slightly differently than NSA -
gentoo has the username in the context for staff_r, for example.  Any other
things I should know about?

I may also be interested in being a policy dev.  Any special requirements?

Thanks,

michael
On Fri, 28 Nov 2003 13:12:56 -0600
Chris PeBenito <pebenito@g.o> wrote:

> This reminds me to make another call for policy devs.  I'm looking for
> people to help out with maintaining daemon policies (common ones).
> Basically the person(s) would be taking the NSA example policies, fixing
> up the file contexts, and make adjustments for Gentoo, and testing.
> They'd also be a backup for me.
>
> With that being said, I'm also making a call out for people who have
> written or modified policy to get their daemons working.  I'm asking
> that you submit your policy on bugzilla (assign bugs to
> pebenito@g.o).  I'd prefer the files as separate attachments to
> the bug, not a tarball.
>
> There are a few requirements:
> 1. please make comments (in the policy and/or bug), so I can understand
> where/why you've made changes.
> 2. the policy should cover common installations.  Please don't submit
> policy for odd or nonstandard daemon configurations.
> 3. I need to know if the policy is dependent on another policy (for
> example rpcd is dependent on portmap) other than base-policy.
> 4. it should be a common daemon (others will be accepted when the common
> stuff is in portage).
>
> I'll also put this information on the project page.
>
> On Thu, 2003-11-27 at 03:06, Tad wrote:
> > Iÿve got qmail working on my SElinux system. Itÿs not complete, but
> > itÿs enough to run qmail-send (and helpers) and qmail-smtpd.
> > However, qmail-pop3d, qmail-qmqpd and qmail-qmtpd are not supported.
> --
> Chris PeBenito
> <pebenito@g.o>
> Developer,
> Hardened Gentoo Linux
> Embedded Gentoo Linux
>
> Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
> Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243
>


-- 
---- ---- ----
Michael Reilly    michaelr@×××××.com
    Cisco Systems, Santa Cruz, CA

--
gentoo-hardened@g.o mailing list