Re: Sendmail & SELinux policies, again

[Tanel Kokk <tanel.kokk@seb.ee>]

Stephen Smalley wrote:
> Given your situation, it may be best to just use what you have (i.e.
> your own custom sendmail policy) and adjust it as needed.  The reason I
> say that is that:
> a) targeted policy doesn't confine sendmail presently.  Even if you grab
> the latest sendmail.te, it has ifdefs to turn sendmail_t into an
> unconfined domain if building targeted policy.  You would have to remove
> that block and adapt the sendmail policy to work with targeted policy
> properly.
> b) you are using CentOS, so you have an older policy base and an older
> policy toolchain.  Trying to use the current/latest sendmail.te and
> mta.te with that older base and toolchain might yield a policy that
> doesn't even compile, much less work.

Thanks!


-- 
Tanel Kokk


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.