1 |
commit: fb855ada9f2ee20f3b8773a4e53a2729973594e5 |
2 |
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> |
3 |
AuthorDate: Thu Apr 5 16:20:49 2012 +0000 |
4 |
Commit: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> |
5 |
CommitDate: Thu Apr 5 16:20:49 2012 +0000 |
6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=commit;h=fb855ada |
7 |
|
8 |
Adding info on sandbox issue |
9 |
|
10 |
--- |
11 |
xml/selinux/hb-using-install.xml | 18 ++++++++++++++++-- |
12 |
1 files changed, 16 insertions(+), 2 deletions(-) |
13 |
|
14 |
diff --git a/xml/selinux/hb-using-install.xml b/xml/selinux/hb-using-install.xml |
15 |
index a2bf934..ae3ce92 100644 |
16 |
--- a/xml/selinux/hb-using-install.xml |
17 |
+++ b/xml/selinux/hb-using-install.xml |
18 |
@@ -7,8 +7,8 @@ |
19 |
<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/proj/en/hardened/selinux/hb-using-install.xml,v 1.4 2011/06/07 19:46:52 klondike Exp $ --> |
20 |
|
21 |
<sections> |
22 |
-<version>17</version> |
23 |
-<date>2012-01-29</date> |
24 |
+<version>18</version> |
25 |
+<date>2012-04-05</date> |
26 |
|
27 |
<section> |
28 |
<title>Installing Gentoo (Hardened)</title> |
29 |
@@ -272,6 +272,10 @@ tools or configurations that apply. |
30 |
</p> |
31 |
|
32 |
<ul> |
33 |
+ <!-- |
34 |
+ TODO When 2.20120215-r5 or higher is stabilized, the LVM change is not needed |
35 |
+ anymore |
36 |
+ --> |
37 |
<li> |
38 |
If you use LVM for one or more file systems, you need to edit |
39 |
<path>/lib/rcscripts/addons/lvm-start.sh</path> (or <path>/lib64/..</path>) |
40 |
@@ -288,6 +292,16 @@ tools or configurations that apply. |
41 |
which mess up the file labelling. For instance, <c>cp /bin/hostname |
42 |
/bin/hostname.old</c>. |
43 |
</li> |
44 |
+ <!-- |
45 |
+ TODO When the fix is accepted in the portage code and that portage version is |
46 |
+ stabilized, the change is not needed anymore. |
47 |
+ --> |
48 |
+ <li> |
49 |
+ Edit <path>/etc/sandbox.conf</path> and add in |
50 |
+ <path>/sys/fs/selinux/context</path> to the <c>SANDBOX_WRITE</c> parameter. |
51 |
+ This is currently needed to work around bug <uri |
52 |
+ link="https://bugs.gentoo.org/410687">410687</uri>. |
53 |
+ </li> |
54 |
</ul> |
55 |
|
56 |
</body> |