[gentoo-hardened] Vconfig on a selinux box

[Aleksander Kamil Modzelewski]

Hi,

for start, sorry if this is a wrong mailing-list :)

I am trying to set up vlans (and several other things) on a hardened gentoo 
box. I found out, that moving the vconfig to ifconfig_exec_t makes it almost 
done, and I have seen that done with tc and ip, _but_ I'd like to just feel 
sure that this is the right way.

And, the vconfig sometimes tries to access the sysfs. And it is denied, and 
everything seems to be ok, but just once I got a segfault and an oops 
(non-critical, I have partial logs, but never reproduced the bug).

regards,
Aleksander Kamil Modzelewski