Re: Fedora policies on Gentoo?

[petre rodan <kaiowas@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1030 bytes --]


Hi

bjorn.padding@ifsav.nl wrote:
> Hi,
>
> I was wondering... I am currently running on Gentoo.
> I see that there are way less existing policies on Gentoo than
> there are on Fedora. Can I unpunished cp these policies to my
> /etc/security/selinux/src/policy dir? The only consequence
> That I can think of is that I might have to change some
> ./file_contexts/program/*.fc according to my Gentoo sys.
> But other than that it wouldn't create any problem, right?

since gentoo is all about choice, depending on your USE flags you will
end up having programs with a different behavior than what is present in
fedora/debian.

this means that sometimes you will also have to tweak the type
enforcement files by adding capabilities or rules that permit
interactions between domains.

> Somebody with some advice?

you can use the nsa policies as a starting point. they are available
over annon cvs. see http://selinux.sourceforge.net/devel/cvs.php3

bye,
peter

--
petre rodan
<kaiowas@gentoo.org>
Developer,
Hardened Gentoo Linux

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 265 bytes --]