selinux October 2004

selinux@lists.fedoraproject.org

48 participants
46 discussions

Filesystem Labeling article online
by James Morris 04 Oct '04

04 Oct '04

I thought it might be useful to mention that an article I've had published in Linux Journal on Filesystem Labeling is online at: http://www.linuxjournal.com/article.php?sid=7426 - James -- James Morris <jmorris(a)redhat.com>

1 0

(no subject)
by Valdis.Kletnieks＠vt.edu 04 Oct '04

04 Oct '04

(Not sure if this is a fedora-selinux or upstream issue, posting to both lists) OK, I see where in recent Fedora-devel RPM's the screensaver is deprecated (as per comments in domains/misc/screensaver.te) . All the same, we probably want the following line in file_contexts to make these binaries be 'bin_t' instead of 'lib_t'... /usr/X11R6/lib/xscreensaver/.* -- system_u:object_r:bin_t

1 0

checkinstall on Fc3T2
by aq 04 Oct '04

04 Oct '04

hello, I am compiling openbox-3.2 from source code (yes, FC3T2 is test edition, so nobody makes packages for it). I run "./configure", then "make". But when I run checkinstall to make a rpm package of openbox, I got various errors (for ex, "Segmentation fault mkdir data 2 & > /dev/null). I guess the problem is that the "checkinstall" has insufficient privilege. What should I do to fix this problem? thank you a lot, AQ

2 1

mDNSResponder running in user_t
by Tom London 02 Oct '04

02 Oct '04

Running strict/enforcing, off of latest Rawhide. 'ps agxZ' yields: system_u:system_r:rpcd_t 2419 ? Ss 0:00 rpc.statd system_u:system_r:rpcd_t 2447 ? Ss 0:00 rpc.idmapd user_u:user_r:user_t 2551 ? Ssl 0:00 mDNSResponder system_u:system_r:fsdaemon_t 2563 ? S 0:00 /usr/sbin/smartd Should mDNSResponder be running as user_u:user_r:user_t? daemon_base_domain() generates a domain_auto_trans(initrc_t, howl_exec_t, howl_t) So, should it be running in howl_t? It gets started from /etc/rc.d/init.d/mDNSResponder: su -s /bin/bash - nobody -c mDNSResponder $OTHER_MDNSRD_OPTS > /dev/null That right? tom -- Tom London

3 5

SELinux talk
by Colin Walters 02 Oct '04

02 Oct '04

Thanks everyone who attended the SELinux talk at Ohio LinuxFest, there seemed to be a lot of interest from people afterwards about it. I've put the slides up here: http://web.verbum.org/selinux/linuxfest/img0.html Since we ran out of time and couldn't get to any questions, feel free to ask them here, on one of the mailing lists above. Thanks again, hopefully see you next year!

1 0

Re: "Stateless Linux" project
by Russell Coker 01 Oct '04

01 Oct '04

On Tue, 14 Sep 2004 04:42, Havoc Pennington <hp(a)redhat.com> wrote: > Red Hat engineering is starting a new project we're calling > "stateless Linux" for lack of a better name - some components of this One thing that needs to be done early on is to extend rsync to support copying XATTRs so it can set the SE Linux context on the files. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

selinux October 2004