Chris P and company

While rummaging through my dmesg's I found a lot of denials related to
the urandom device and then found the global_ssp boolean when looking at
stuff through apol.  (20070329 ref policy btw).  Anyway I also saw this

 http://www.nsa.gov/selinux/list-archive/0603/thread_body35.cfm

documenting this gentoo-only flag.  The only trouble is that the
booleans.conf that unpacks with the reference policy has this set to
false.  Is this worth a trip to bugzilla to write it up?


-- 
gentoo-hardened@g.o mailing list