Services running into vserver

[Daniel Gil Mayol <daniel.gil-mayol@brunel.de>]

Hello my name is Daniel and I have a question related with the services 
running into a vserver.

I have read that for Red Hat Enterprise Linux (v. 4), due to a SELinux 
bug the dbus can't send audit messages (here is the link: 
http://rhn.redhat.com/errata/RHBA-2006-0049.html ).

I have the services dns and dhcp running in a vserver and the system 
doesn't work as expected but no audit messages are logged (I suppose 
that these both services uses dbus (messagebus) and don't send denied 
messages to audit system). Can I get audit messages without update the 
selinux policy (fix the bug)? Obviously, without place the services out 
of the vserver :)

I'm writing also test scripts for checking that the services running in 
the SELinux system are properly protected. All the services running into 
the vserver has a common security context, it means, there is no 
difference for dns or dhcp services. Should I write an special test 
script only for the vserver, enter into the vserver with "[root@mypc ~]# 
vserver VSERVER_NAME enter" and run the script?

Thanks,

Daniel

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.