Re: init unconfined in RHEL4?

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Wed, 2006-10-04 at 07:54 +1000, Russell Coker wrote:
> On Wednesday 04 October 2006 07:01, Daniel J Walsh <dwalsh@redhat.com> wrote:
> > Osborn, Justin D. wrote:
> > > I'm working on a RHEL4 system with the Reference Policy and init is
> > > running in unconfined_t.  This leads to most other processes on the
> > > system running in unconfined_t.  Has anyone seen similar errors?
> >
> > In RHEL4 only 15 Targets are confined,  Everything else runs in an
> > unconfined domain.
> >
> > > This is the Ref. Policy version released in March, I got the latest
> > > svn version but it doesn't work with the libsepol and checkpolicy
> > > RHEL4 RPMs on the Tresys site.
> 
> Justin, the problem is that you are running a non-standard policy on RHEL4.
> 
> If you run the back-port of the reference policy on RHEL4 then Red Hat won't 
> support you and most developers won't be interested as development happens on 
> Rawhide.
> 
> If you have problems with Refpolicy on RHEL4 and can reproduce them on FC6test 
> releases then many people will be interested in investigating the problems.  
> But if it's only a problem for Refpolicy on RHEL4 then you are probably on 
> your own.

Actually, we are interested in RHEL4.  Its going to still be around for
years, and is still important, which is why there is a rhel4 distro
tunable.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.