From: Daniel J Walsh <dwalsh@redhat.com>
To: "Fedora SELinux support list for users & developers."
<fedora-selinux-list@redhat.com>,
SE Linux <selinux@tycho.nsa.gov>
Subject: Fedora Targeted List grows on Rawhide.
Date: Mon, 20 Dec 2004 15:09:39 -0500 [thread overview]
Message-ID: <41C73183.5040209@redhat.com> (raw)
I have added several targets to Targeted Policy as of
selinux-policy-targeted-1.19.14-2.
I am attempting to add most of the network daemons to targeted. In
order to experiment with this new
policy file, you will need to relabel. Or you can just relabel the
target you are interested in.
The best way to do this is install the policy and then execute
rpm -q -l TARGETRPM | restorecon -R -f -
Current targets
amanda.te apache.te cups.te dhcpd.te dictd.te dovecot.te fingerd.te
ftpd.te howl.te i18n_input.te inetd.te innd.te kerberos.te ktalkd.te
ldconfig.te lpd.te mailman.te modutil.te mta.te mysqld.te named.te
nscd.te ntpd.te portmap.te postgresql.te privoxy.te radius.te radvd.te
rpcd.te rshd.te rsync.te samba.te slapd.te snmpd.te spamd.te squid.te
stunnel.te syslogd.te tftpd.te winbind.te ypbind.te ypserv.te zebra.te
This is not a commitment for this list in FC4, some could be pulled if
they don't work well :*).
The goal of targeted policy is to protect all network daemons and to
allow userspace to run with normal privs. You still need strict
policy to confine userspace.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
reply other threads:[~2004-12-20 20:09 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=41C73183.5040209@redhat.com \
--to=dwalsh@redhat.com \
--cc=fedora-selinux-list@redhat.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.