Re: SELinux for embedded devices...

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Fri, Jul 29, 2005 at 10:17:18AM +0530, Sriram, Kannan wrote:
> Does SELinux require a writeable filesystem always? 

 no, it doesn't.

 however, nobody with the skills to add xattrs to any of
 the read-only filesystems has yet gone ahead and done it /
 had a requirement strong enough to justify adding xattrs.
 [i added xattrs to tmpfs because i really needed it and there
 were enough simple examples to copy].

 i too would like to use selinux-enabled squashfs or other
 read-only filesystem, because that's a _fantastic_ way of
 getting a secure OS.  someone's root-kitted the machine?
 oh dearie me: reboot it and you _know_ that the squashfs-based
 live boot CD will get you back up-and-running.

 yep.

 throw some money my way and i'll do it for you.

 l.
 


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.