Gentoo Archives: gentoo-hardened

From: Chris PeBenito <pebenito@g.o>
To: Tad <tadglines@×××××××.net>
Cc: Hardened Gentoo Mail List <gentoo-hardened@g.o>
Subject: [gentoo-hardened] Call for policy and devs (was: qmail on selinux)
Date: Fri, 28 Nov 2003 19:12:58
Message-Id: 1070046776.21504.84.camel@chris.pebenito.net
In Reply to: [gentoo-hardened] qmail on selinux by Tad
1 This reminds me to make another call for policy devs. I'm looking for
2 people to help out with maintaining daemon policies (common ones).
3 Basically the person(s) would be taking the NSA example policies, fixing
4 up the file contexts, and make adjustments for Gentoo, and testing.
5 They'd also be a backup for me.
6
7 With that being said, I'm also making a call out for people who have
8 written or modified policy to get their daemons working. I'm asking
9 that you submit your policy on bugzilla (assign bugs to
10 pebenito@g.o). I'd prefer the files as separate attachments to
11 the bug, not a tarball.
12
13 There are a few requirements:
14 1. please make comments (in the policy and/or bug), so I can understand
15 where/why you've made changes.
16 2. the policy should cover common installations. Please don't submit
17 policy for odd or nonstandard daemon configurations.
18 3. I need to know if the policy is dependent on another policy (for
19 example rpcd is dependent on portmap) other than base-policy.
20 4. it should be a common daemon (others will be accepted when the common
21 stuff is in portage).
22
23 I'll also put this information on the project page.
24
25 On Thu, 2003-11-27 at 03:06, Tad wrote:
26 > I’ve got qmail working on my SElinux system. It’s not complete, but
27 > it’s enough to run qmail-send (and helpers) and qmail-smtpd.
28 > However, qmail-pop3d, qmail-qmqpd and qmail-qmtpd are not supported.
29 --
30 Chris PeBenito
31 <pebenito@g.o>
32 Developer,
33 Hardened Gentoo Linux
34 Embedded Gentoo Linux
35
36 Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
37 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] Call for policy and devs (was: qmail on selinux) Michael Reilly <michaelr@×××××.com>
RE: [gentoo-hardened] Call for policy and devs (was: qmail on selinux) Tad <tadglines@×××××××.net>