Re: Making SELinux standard for etch
* Manoj Srivastava (email@example.com) [061007 00:41]:
> I brought this over on the debian-installer mailing list, and
> suggested that we ship SELinux installed, but turned off by default;
> and a README or a short shell script fr the local administrator to
> enable SELinux. Our support at this point is better in some respects
> to any other distribution (selecting and installing modular policy
> modules, for instance). All the core packages support SELinux (unlike
> in, say, Ubuntu).
> We can do this by adding selinux-policy-refpolicy-targeted,
> and the dependencies, to the standard install.
I am happy that SELinux is so good now. However, I think it is a bit
late to make such changes now.
> As per policy, I am raising a balloon about ths issue; I think
> if we ship vacation, finger, and sharutils, we can also ship
> mandatory acess controls in the standard distribution :)
aba@spohr:~$ zcat /org/ftp.debian.org/ftp/dists/testing/*/binary-i386/Packages.gz | grep-dctrl -P vacation -s Priority
We already fixed that pre-sarge, btw. :)
If people think finger and sharutils are not important enough anymore to
still be standard, we can still fix that.