Re: Bug#390760: debian-installer: Support targeted SELinux in the installer
Frans Pop <elendil@planet.nl> writes:
> On Tuesday 03 October 2006 01:08, Otavio Salvador wrote:
>> Manoj Srivastava <srivasta@debian.org> writes:
>> > We are at a point where we can support a targeted SELinux
>> > policy, at least in permissive mode, I suggest that we ship SELinux
>> > installed, but turned off by default; and a README or a short shell
>> > script fr the local administrator to enable SELinux. Our support at
>> > this point is better in some respects to any other distribution
>> > (selecting and installing modular policy modules, for instance). All
>> > the core packages support SELinux (unlike in, say, Ubuntu).
>>
>> What about we add it as a task on tasksel and make grub-installer
>> enable it in case of the task is selected?
>
> On IRC yesterday Manoj was very clear that this is _not_ what we want at
> this point. The main reason AIUI is that enabling it without checking the
> setup first may break applications as we don't yet have perfect policies
> for a lot of important packages.
>
> Enabling selinux will require some manual changes by the user. Where
> documentation can be found how to enable it should be documented in the
> Etch Release Notes.
Ok but including packages in standard installation at this point of
release isn't right from my POV. That's why I proposed to use a task
in this case.
--
O T A V I O S A L V A D O R
---------------------------------------------
E-mail: otavio@debian.org UIN: 5906116
GNU/Linux User: 239058 GPG ID: 49A5F855
Home Page: http://www.freedom.ind.br/otavio
---------------------------------------------
"Microsoft gives you Windows ... Linux gives
you the whole house."
Reply to: