Re: Still no authentication from new debian packages

[Dale Amon <amon@vnl.com>]

On Sun, Nov 30, 2003 at 01:10:24PM -0600, Manoj Srivastava wrote:
> 	I am afraid that diversions of conffiles may also be frowned
>  upon.  The best solution I can think of is a NEWS.Debian files, and a
>  simple ed/sed/awk/perl utility that helps the sysadmin make these
>  changes. (Or create a sample /etc/pam.d/{login,ssh}.selinux set of
>  files, and ask the sysadmin to mv them over. Or something.

That's a pretty rotten solution IMHO. It won't affect
me personally all that much: I have my own meta-installation
system that unpacks debian and then just does to the
file system what ever I DWP... but for those poor newbies
out there, this kind of thing just raises the bar by yet
another notch.

We have to have a solution in which you install a basic
selinux system and It Just Works.

We all know it takes a great deal of expertise to fiddle
selinux. But I (and I think others here) do have hopes
that some way can be found to give much of its benefits
to people who are not 20 year unix heads.

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.