1 |
> Krzysztof Kozlowski wrote: |
2 |
>> The problem is that there are only ebuilds for some of selinux modules. I |
3 |
>> couldn't find one for e.g. dovecot, smartmon, quota, logwatch, slocate, munin |
4 |
|
5 |
Lukasz Marszal wrote: |
6 |
> You are right - for some ebuilds there are no selinux modules. |
7 |
|
8 |
But there are many modules that are included in refpolicy, but they are |
9 |
not packaged in gentoo packages and have to be installed by hand. You |
10 |
can make local portage overlay and create ebuilds for them. It isn't |
11 |
much work, because of selinux-policy-2 eclass. |
12 |
Example ebuild: |
13 |
|
14 |
------ BEGIN ------ |
15 |
|
16 |
MODS="dovecot" |
17 |
POLICY_TYPES="strict targeted" |
18 |
IUSE="" |
19 |
|
20 |
inherit selinux-policy-2 |
21 |
|
22 |
DESCRIPTION="SELinux dovecot policy" |
23 |
|
24 |
KEYWORDS="alpha amd64 mips ppc sparc x86" |
25 |
|
26 |
------ END ------ |
27 |
|
28 |
And eclass does all the work for you. |
29 |
|
30 |
Regards, |
31 |
Marek Wróbel |
32 |
-- |
33 |
gentoo-hardened@g.o mailing list |