1 |
On Wednesday 07 December 2011 09:07:41 Anthony G. Basile wrote: |
2 |
> Some time ago the selinux team restructured the selinux profiles and |
3 |
> made a features/selinux which could be stacked on the hardened profiles |
4 |
> for x86/amd64. At that time I also tested and found that it stacked |
5 |
> fine on default/linux/{amd64,x86}/10.0. I'm emailing the list to see if |
6 |
> there's any reason why we shouldn't add |
7 |
> default/linux/{amd64,x86}/10.0/selinux. Currently I prefer adding it |
8 |
> directly to 10.0 rather than 10.0/server because the status of the later |
9 |
> is uncertain. Selinux on the desktops is not being strongly supported |
10 |
> so its not appropriate there either, leaving only 10.0/selinux. If |
11 |
> added eselect profile list would show |
12 |
> |
13 |
> [1] default/linux/amd64/10.0 |
14 |
> [2] default/linux/amd64/10.0/selinux |
15 |
> [3] default/linux/amd64/10.0/desktop |
16 |
> [4] default/linux/amd64/10.0/desktop/gnome |
17 |
> [5] default/linux/amd64/10.0/desktop/kde |
18 |
> [6] default/linux/amd64/10.0/developer |
19 |
> [7] default/linux/amd64/10.0/no-multilib |
20 |
> [8] default/linux/amd64/10.0/server |
21 |
> [9] hardened/linux/amd64 * |
22 |
> [10] hardened/linux/amd64/selinux |
23 |
> [11] hardened/linux/amd64/no-multilib |
24 |
> [12] hardened/linux/amd64/no-multilib/selinux |
25 |
|
26 |
we have the selinux/ root. is that no longer necessary ? |
27 |
-mike |