FC3 strict policy

[Russell Coker]

I had a user ask me off-list about strict policy for FC3.  It hadn't been 
updated for name_connect and the policy in FC4 doesn't work.

Attached is a first pass at updating the FC3 strict policy to work with the 
latest kernels.  I encourage anyone who is running FC3 strict machines to use 
selinux-policy-strict-sources-1.19.10-2 plus this patch instead of trying to 
use FC4 policy.

NB  It will take a little more work to get anything other than a basic server 
going with this policy, but it should be less work than the other options and 
the results should be better.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

[Russell Coker]

On Monday 03 October 2005 19:27, Russell Coker <russell(a)coker.com.au&gt; wrote:
>  Attached is a first pass at updating the FC3 strict policy to work
> with the
>  latest kernels.  I encourage anyone who is running FC3 strict machines to 
I've attached an update to this with a few other things fixed.  There's still 
more work to be done, but someone who is prepared to modify their own policy 
(which means everyone who uses strict policy in FC3) should find it easy to 
get things going after applying the attached patch.

Dan, are you planning to provide updated strict policy packages for FC3?

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

[Daniel J Walsh]

Russell Coker wrote:
>  On Monday 03 October 2005 19:27, Russell Coker
> <russell(a)coker.com.au&gt; wrote:
>    
> > Attached is a first pass at updating the FC3 strict policy to work with the
> > latest kernels.  I encourage anyone who is running FC3 strict machines to
> >     
>
>  I've attached an update to this with a few other things fixed.  There's still 
>  more work to be done, but someone who is prepared to modify their own policy 
>  (which means everyone who uses strict policy in FC3) should find it easy to 
>  get things going after applying the attached patch.
>
>  Dan, are you planning to provide updated strict policy packages for FC3?
>
>     
No.

--