Re: The possibility of SELinux targeted policy in the default install
On Thu, Sep 14, 2006 at 11:54:34PM +0200, Erich Schubert wrote:
> Hi Manoj, Russell, Debian-Boot,
> Thinking some more about it, I have large doubts that we'll have a
> somewhat working SELinux out of the box with etch. There is still quite
> some stuff we would need to do some auto setup magic (or at least
> convince the maintainers).
> For example both /etc/pam.d/login and /etc/pam.d/ssh need to be
> modified. The modification in ssh is in, just needs to be uncommented. I
> think Uwe just contacted the shadow maintainers about the login change.
Could you remind me why this module is specific to /etc/pam.d/ssh and
/etc/pam.d/login, rather than something that should be enabled in the global
config?
Thanks,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
vorlon@debian.org http://www.debian.org/
Reply to: