Gentoo Archives: gentoo-hardened

From: Luis Ressel <aranea@×××××.de>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Some Selinux questions on a fresh install
Date: Sun, 24 Feb 2013 15:31:02
Message-Id: 20130224163028.558581e9@gentp.lnet
In Reply to: Re: [gentoo-hardened] Some Selinux questions on a fresh install by Sven Vermeulen
1 On Fri, 22 Feb 2013 19:27:00 +0000
2 Sven Vermeulen <swift@g.o> wrote:
3
4 > I also notice a lot of capability (mknod) requests in the denials -
5 > again, without noticeable change in behavior. Very awkward to debug -
6 > I can't just dontaudit it (not convinced they aren't needed) nor
7 > allow (not convinced they are needed) :-/
8
9 That's caused by a new grsecurity feature in hardened-sources-3.7.5,
10 I filed a bug about that a week ago:
11 https://bugs.gentoo.org/show_bug.cgi?id=457812
12
13 Regards,
14 Luis

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] Some Selinux questions on a fresh install Sven Vermeulen <swift@g.o>