Gentoo Archives: gentoo-hardened

From: "Anthony G. Basile" <basile@××××××××××××××.edu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Stabilizing the new selinux profiles
Date: Sun, 21 Aug 2011 21:01:58
Message-Id: 4E517227.5090200@opensource.dyc.edu
In Reply to: Re: [gentoo-hardened] Stabilizing the new selinux profiles by Matt Thode
1 On 08/21/2011 04:03 PM, Matt Thode wrote:
2 >
3 > On Aug 21, 2011, at 7:03 AM, Mike Edenfield wrote:
4 >
5 >> On 8/21/2011 7:10 AM, Anthony G. Basile wrote:
6 >>> Hi everyone,
7 >>>
8 >>> Back in May, I added new feature/selinux profiles which we would like to
9 >>> stabilize soon. These were structured to parallel the
10 >>> selinux/v2refpolicy profiles but with the idea that they could be added
11 >>> as a feature to any existing profile.
12 >>>
13 >>> There are no open bugs out against them, so we are clear to stabilize,
14 >>> but I would like feedback from the community about their use, especially
15 >>> since the next step might be to deprecate the older profiles. (Don't
16 >>> panic! It would not happen anytime soon if at all. And you would get
17 >>> ample warnings.)
18 >>>
19 >>> Either we haven't hit any bugs with the new profiles because of low
20 >>> usage or because there just aren't any, so community feedback about
21 >>> their use and usefulness would be appreciated.
22 >>
23 >> I'm using them on all of my SELinux systems now and haven't noticed any issues with them, and I have at least one of each (x86, amd64, and amd64-multilib).
24 >>
25 >> --Mike
26 >>
27 >
28 > I've been using it on 4 systems for the last month or so.
29 >
30 > -- Matthew Thode
31
32 Okay, I will be marking these profiles stable.
33
34 --
35 Anthony G. Basile, Ph. D.
36 Chair of Information Technology
37 D'Youville College
38 Buffalo, NY 14201
39 (716) 829-8197