Re: selinux and kde

[Andreas Schuldei <andreas@schuldei.org>]

* Luke Kenneth Casson Leighton (lkcl@lkcl.net) [040824 03:46]:
> ... does anyone ever actually _use_ strict selinux policy enforcing
> and successfully run kde under it??
> 
> i mean, i know i've been doing a lot of messing about trying
> to get things to work, including perhaps unnecessarily adding
> a policy for k3b (and cdrecord) and one for usbmount, and
> fireflier too, but a 1,800 line patch to the default 1.14
> policy is a heck of a lot of messing.

i agree. i set up a debian unstable server some weeks ago and
installed (quite painfully) selinux, running into most of the
problems you encountered before. when it was up it crashed
regularly at least every other day, since i compiled a kernel
without apm (following a hunch), which improved the situation
drastically and the server reaches uptimes of up to seven days
now.

the amount of avc messages i got when running normal operation
without any special stuff (postfix mostly, where spam filtering
with spamd is the most advanced operation i do) discouraged me
slightly to pursue this path right now.

i conclude that debian is not a viable platform for selinux for
non-selinux development right now. this is a real tragedy since
both russel and colins were working on it some time ago as their
prime platform, pushing it hard on debian, but i guess the
enormous debian initeria and the reluctance to include their lib
into base along with their jobs at redhat killed it for now.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.