Updated SELinux Release

Updated SELinux Release

[Stephen Smalley]

An updated SELinux release is available from the NSA SELinux web site;
see http://www.nsa.gov/selinux/news.cfm#R050107.  This release is based
on Linux 2.6.10, but the current SELinux patch for the kernel includes a
number of changes merged after 2.6.10 was released, including the AVC
scalability work, AVC API and statistics support, dynamic context
transition support, and enhanced controls over executable mappings.  The
checkpolicy policy compiler has been updated to order node context
entries and to support supplementary type attribute declarations. 
Several improvements to libselinux, policycoreutils, and policy have
been merged.  Updated versions of setools, slat, and polgen were added. 
The selinux-doc CREDITS file
and Contributors web page have been updated.

As discussed on the list after the last release, we have reduced the NSA
SELinux release to just the core SELinux code, dropping the patched
userland packages, the prepatched kernel tarball, and the full userland
tarball.  Information about obtaining patched userland packages for
various distributions is available from the sourceforge selinux site
(http://selinux.sf.net), and a reference set of SELinux userland patches
is available in the public Fedora CVS tree.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

SElinux - FC3

[Jayendren Anand Maduray]

Hi!

after enabling SElinux in FC3 - the following failed to startup:

syslog
portmapper

My methods are enforcing, and at the moment i can excluding these daemons
from selinux.
I would like to get them working, n e thoughts, suggestions?

God bless.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SElinux - FC3

[Daniel J Walsh]

Jayendren Anand Maduray wrote:

>Hi!
>
>after enabling SElinux in FC3 - the following failed to startup:
>
>syslog
>portmapper
>
>My methods are enforcing, and at the moment i can excluding these daemons
>from selinux.
>I would like to get them working, n e thoughts, suggestions?
>
>God bless.
>
>
>  
>
They should be working.  I have a feeling you have a mislabled machine. 

touch /.autorelabel
reboot

>--
>This message was distributed to subscribers of the selinux mailing list.
>If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
>the words "unsubscribe selinux" without quotes as the message.
>  
>


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.