From: Russell Coker <russell@coker.com.au>
To: selinux-refpolicy@vger.kernel.org
Subject: policy to systemd
Date: Sat, 21 Dec 2024 13:23:44 +1100 [thread overview]
Message-ID: <9420284.CDJkKcVGEf@cupcakke> (raw)
[-- Attachment #1: Type: text/plain, Size: 512 bytes --]
I've attached an early version of a program to generate systemd security
settings from SE Linux policy. The aim of this is to lock down daemons on
non-SE systems while using tested policy and to also act as a second level of
security on SE Linux systems while giving a lower score for "systemd-analyze
security".
Anyone have any ideas for how to automatically determine SystemCallFilter
values from policy?
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
[-- Attachment #2: pol2systemd.pl --]
[-- Type: application/x-perl, Size: 4183 bytes --]
reply other threads:[~2024-12-21 2:28 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=9420284.CDJkKcVGEf@cupcakke \
--to=russell@coker.com.au \
--cc=selinux-refpolicy@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.