Yes, I can help to test this application under SELinux

El 6/15/2011 6:07 PM, Dominick Grift escribió:x


On Wed, 2011-06-15 at 17:54 -0430, Marcos Ortiz wrote:

Ok, thanks a lot, Dominick.
I think that´s a good start to me.

So i gather that you determined that SELinux currently does not support
this application?

Can i ask you:

what made you come here? Were you facing SELinux related issues with
this application?

I have not done anything yet

To be able to add SELinux support for your application, we would need to
work toether a bit. That is to say: Someone with some knowledge about
how to configure this app lication would need to be able to test the
policy and provide feedback.

Is this application available in the Fedora repository?

I read about this a message from the Traffic Server's user list and I found this

https://bugzilla.redhat.com/show_bug.cgi?id=683463

from Jan-Frode Myklebust (janfrode@tanso.net) 
I think that TS is on the EPEL repository,
I will look for this.

Would you be able to help us test any provided SELinux configuration and
give us feedback.

Yes, I will provide all the feedback that I could

There are currently a thousand and one applications not "supported" by
SELinux in one sense or another. To be able to add that support for your
application it would help if you could help us make this work by
providing information, help us test policy and provide feedback.

Some of the first questions i usually ask are: 

Can you make the application work with SELinux in permissive mode and if
so can you provide a listing of all the files that this package installs
(rpm -ql $package_name)

That's the first action that I want to take.
I will install the completed test environment and I will send you all the files that this application uses, read and write.

  
    

-- 
Marcos Luís Ortíz Valmaseda
 Software Engineer (UCI)
 http://marcosluis2186.posterous.com
 http://twitter.com/marcosluis2186