Re: Making SELinux standard for etch

[Andreas Barth <aba@not.so.argh.org>]

Hi,

* Manoj Srivastava (srivasta@debian.org) [061007 00:41]:
>         I brought this over on the debian-installer mailing list, and
>  suggested that we ship SELinux installed, but turned off by default;
>  and a README or a short shell script fr the local administrator to
>  enable SELinux.  Our support at this point is better in some respects
>  to any other distribution (selecting and installing modular policy
>  modules, for instance). All the core packages support SELinux (unlike
>  in, say, Ubuntu).
> 
>        We can do this by adding selinux-policy-refpolicy-targeted,
>  and the dependencies, to the standard install.

I am happy that SELinux is so good now. However, I think it is a bit
late to make such changes now.

>         As per policy, I am raising a balloon about ths issue; I think
>  if we ship vacation, finger, and sharutils, we can also ship
>  mandatory acess controls in the standard distribution :)

aba@spohr:~$ zcat /org/ftp.debian.org/ftp/dists/testing/*/binary-i386/Packages.gz | grep-dctrl -P vacation -s Priority
Priority: extra

We already fixed that pre-sarge, btw. :)

If people think finger and sharutils are not important enough anymore to
still be standard, we can still fix that.


Cheers,
Andi
-- 
  http://home.arcor.de/andreas-barth/