Gentoo Archives: gentoo-hardened

From: Sven Vermeulen <swift@g.o>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Heads-up on SELinux profile update
Date: Mon, 18 Jun 2012 21:02:15
Message-Id: 20120618191500.GA27972@gentoo.org
1 Hi guys,
2
3 In reply to bug #414785, I'm going to make the following change to the
4 SELinux profile. If that isn't okay, just let me know.
5
6 Reasoning:
7 - the three packages should not be hard-set as requirements (definitely not
8 for SELinux, so if they are, that should be inherited from the parent
9 profile)
10 - the util-linux and pam package versions are already quite old (stable
11 versions are a lot higher than those) and I don't see a need to fix
12 util-linux and pam in the system set for SELinux
13
14 I'll pun them in a few days if there are no objections.
15
16 Wkr,
17 Sven Vermeulen
18
19
20 Index: packages
21 ===================================================================
22 RCS file: /var/cvsroot/gentoo-x86/profiles/features/selinux/packages,v
23 retrieving revision 1.2
24 diff -u -B -r1.2 packages
25 --- packages 9 Aug 2011 04:29:55 -0000 1.2
26 +++ packages 18 Jun 2012 19:12:03 -0000
27 @@ -2,18 +2,6 @@
28 # Distributed under the terms of the GNU General Public License v2
29 # $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/packages,v 1.2 2011/08/09 04:29:55 zmedico Exp $
30
31 -# This file extends the base packages file for the default profile that all
32 -# architectures will enjoy. Please note that default is what most architectures
33 -# will have. Some will have an selinux profile (see ${PORTDIR}/profiles/selinux).
34 -# The idea is to only create a new family of profiles when absolutely necessary.
35 -
36 -*sys-apps/busybox
37 -*sys-apps/hdparm
38 -*sys-apps/man-pages
39 -
40 -##############################################################################
41 -# Basic SELinux required versionings
42 -
43 # Base SELinux packages
44 *sys-libs/libsepol
45 *sys-libs/libselinux
46 @@ -21,7 +9,3 @@
47 *sys-apps/checkpolicy
48 *sys-apps/policycoreutils
49 *sec-policy/selinux-base-policy
50 -
51 -# SELinux-aware packages
52 -*>=sys-apps/util-linux-2.12
53 -*>=sys-libs/pam-0.77

Replies

Subject Author
Re: [gentoo-hardened] Heads-up on SELinux profile update Sven Vermeulen <swift@g.o>