question policy

[Ma. Alejandra Castillo]

Sirs, I need a little help. I want to realize a policy (targeted) with Samba 
or shh. In this moment I am realizing my tesis and I have already documented 
in spanish a lot about selinux. But now is the time to realize the policy 
and I only have two months for this.

Can you give an idea to realize this in a short time?. The idea is to create 
a final product well done.

saludos

--
Ma. Alejandra Castillo

[Stephen Smalley]

On Mon, 2005-06-06 at 18:44 -0400, Ma. Alejandra Castillo M. wrote:
>  Sirs, I need a little help. I want to realize a policy (targeted)
> with Samba 
>  or shh. In this moment I am realizing my tesis and I have already documented 
>  in spanish a lot about selinux. But now is the time to realize the policy 
>  and I only have two months for this.
>  
>  Can you give an idea to realize this in a short time?. The idea is to create 
>  a final product well done. 
Not clear what you are asking, but have you looked at the FC4 targeted
policy?

-- 
Stephen Smalley
National Security Agency

[Ma. Alejandra Castillo]

>  Not clear what you are asking, but have you looked at the FC4
> targeted
>  policy?
>
>  -- 
>  Stephen Smalley
>  National Security Agency 
jejeje, i hope now is understood.
I kindly request your assistance, I would like to do a targeted wether with 
Samba or SSH. Right now I'm doing my final tesis and I have enough documents 
in spanish about SE Linux, but time has come to do a targeted and I have 
only two months left to do so.
(FC4? not yet I have reviewed. I am waiting for the final version)
saludos

--

Ma. Alejandra Castillo

[Stephen Smalley]

On Wed, 2005-06-08 at 11:58 -0400, Ma. Alejandra Castillo M. wrote:
>  I kindly request your assistance, I would like to do a targeted
> wether with 
>  Samba or SSH. Right now I'm doing my final tesis and I have enough documents 
>  in spanish about SE Linux, but time has come to do a targeted and I have 
>  only two months left to do so.
>  (FC4? not yet I have reviewed. I am waiting for the final version)
>  saludos 
FC4 targeted policy includes many more confined daemons than FC3, so you
might want to look at it (from the development tree).  Or you could use
strict policy.  I doubt that even FC4 targeted policy confines sshd,
since it has to transition to user processes that are unconfined.

-- 
Stephen Smalley
National Security Agency