What happened to source for targeted?

What happened to source for targeted?

[Lance Spitzner]

Apologies if this is off topic or can be found elsewhere, I'm not  
having luck with archives or Google.  What happened to the source for  
the targeted policy?  The latest versions of Red Hat (Fedora8 /  
CensOS5) have the targeted policy, but no source for it.  I cannot  
find the RPMs either for the source.  Is there a source for the  
targeted policy, am I missing something?

Words of wisdom appreciated, thanks!

lance

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: What happened to source for targeted?

[Dave Quigley]

I believe in fc8 the strict and target policy sources were merged into
one package. I believe the link below is the source rpm that you want.

http://ftp.usf.edu/pub/fedora/linux/releases/8/Everything/source/SRPMS/selinux-policy-3.0.8-44.fc8.src.rpm

Dave

On Thu, 2007-12-27 at 23:28 -0600, Lance Spitzner wrote:
> Apologies if this is off topic or can be found elsewhere, I'm not  
> having luck with archives or Google.  What happened to the source for  
> the targeted policy?  The latest versions of Red Hat (Fedora8 /  
> CensOS5) have the targeted policy, but no source for it.  I cannot  
> find the RPMs either for the source.  Is there a source for the  
> targeted policy, am I missing something?
> 
> Words of wisdom appreciated, thanks!
> 
> lance
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: What happened to source for targeted?

[Lance Spitzner]

On Dec 28, 2007, at 9:37, Dave Quigley wrote:

> I believe in fc8 the strict and target policy sources were merged into
> one package. I believe the link below is the source rpm that you want.
>
> http://ftp.usf.edu/pub/fedora/linux/releases/8/Everything/source/SRPMS/selinux-policy-3.0.8-44.fc8.src.rpm

Dave, thanks so much for you kind follow-up, I greatly appreciate it!   
If you don't mind, one more question.  What is the latest, most  
current documentation on SELinux?  I found an excellent resources at  
Fedora which includes a very user friendly FAQ.

   http://docs.fedoraproject.org/selinux-faq-fc5/#faq-entry-whatis-refpolicy

However, this is based on Fedora Core 5 which was last updated in in  
2006. Is this still the same SELinux that is shipped with Fedora8/ 
CentOS5?

Once again, thanks!

lanc

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: What happened to source for targeted?

[Dave Quigley]

On Fri, 2007-12-28 at 10:42 -0600, Lance Spitzner wrote:
> On Dec 28, 2007, at 9:37, Dave Quigley wrote:
> 
> > I believe in fc8 the strict and target policy sources were merged into
> > one package. I believe the link below is the source rpm that you want.
> >
> > http://ftp.usf.edu/pub/fedora/linux/releases/8/Everything/source/SRPMS/selinux-policy-3.0.8-44.fc8.src.rpm
> 
> Dave, thanks so much for you kind follow-up, I greatly appreciate it!   
> If you don't mind, one more question.  What is the latest, most  
> current documentation on SELinux?  I found an excellent resources at  
> Fedora which includes a very user friendly FAQ.
> 
>    http://docs.fedoraproject.org/selinux-faq-fc5/#faq-entry-whatis-refpolicy
> 
> However, this is based on Fedora Core 5 which was last updated in in  
> 2006. Is this still the same SELinux that is shipped with Fedora8/ 
> CentOS5?

Exactly what kind of information are you looking for? Are you looking
for an explanation of what SELinux is and the model it uses? Are you
looking for guides on writing policy? 
> 
> Once again, thanks!
> 
> lanc
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: What happened to source for targeted?

[Lance Spitzner]

>>   http://docs.fedoraproject.org/selinux-faq-fc5/#faq-entry-whatis-refpolicy
>>
>> However, this is based on Fedora Core 5 which was last updated in in
>> 2006. Is this still the same SELinux that is shipped with Fedora8/
>> CentOS5?
>
> Exactly what kind of information are you looking for? Are you looking
> for an explanation of what SELinux is and the model it uses? Are you
> looking for guides on writing policy?

More along the lines of modifying policies.  I think what RH has done  
with Targeted is great, a good starting place that works for many  
situations.  What I'm looking for is current documentation on tweaking  
it.  I like the URL I give above, I just want to be sure its current.   
My only other concern with the documentation is they often reference  
the GUI tools, my preference is to do everything CLI.

Once again, thanks!

lance

PS: The other source I've found to be the most helpful in modifying/ 
updating SELinux is

  http://www.redhat.com/docs/manuals/enterprise/RHEL-5-manual/Deployment_Guide-en-US/sec-sel-policy-customizing.html

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: What happened to source for targeted?

[Dave Quigley]

On Fri, 2007-12-28 at 11:47 -0600, Lance Spitzner wrote:
> >>   http://docs.fedoraproject.org/selinux-faq-fc5/#faq-entry-whatis-refpolicy
> >>
> >> However, this is based on Fedora Core 5 which was last updated in in
> >> 2006. Is this still the same SELinux that is shipped with Fedora8/
> >> CentOS5?
> >
> > Exactly what kind of information are you looking for? Are you looking
> > for an explanation of what SELinux is and the model it uses? Are you
> > looking for guides on writing policy?
> 
> More along the lines of modifying policies.  I think what RH has done  
> with Targeted is great, a good starting place that works for many  
> situations.  What I'm looking for is current documentation on tweaking  
> it.  I like the URL I give above, I just want to be sure its current.   
> My only other concern with the documentation is they often reference  
> the GUI tools, my preference is to do everything CLI.

The resources you mentioned are as good as it gets in terms of
documenting policy development for SELinux. I'm not one of the policy
guys so I don't claim to be an expert however I have read through
SELinux by Example and it provides a good understanding of the basics.
If you can outline what you intend to be modifying perhaps I can point
you in a good direction.

> 
> Once again, thanks!
> 
> lance
> 
> PS: The other source I've found to be the most helpful in modifying/ 
> updating SELinux is
> 
>   http://www.redhat.com/docs/manuals/enterprise/RHEL-5-manual/Deployment_Guide-en-US/sec-sel-policy-customizing.html
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: What happened to source for targeted?

[James Antill]

[-- Attachment #1: Type: text/plain, Size: 736 bytes --]


On Thu, 2007-12-27 at 23:28 -0600, Lance Spitzner wrote:
> Apologies if this is off topic or can be found elsewhere, I'm not  
> having luck with archives or Google.  What happened to the source for  
> the targeted policy?  The latest versions of Red Hat (Fedora8 /  
> CensOS5) have the targeted policy, but no source for it.  I cannot  
> find the RPMs either for the source.  Is there a source for the  
> targeted policy, am I missing something?

 The way to find this information out is:

% yumdownloader --source selinux-policy-targeted --urls

...or remove the --urls option to just download the .src.rpm. The
yumdownloader application is part of the yum-utils package.

-- 
James Antill <jantill@redhat.com>

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]