[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [RFC] Changing priority of selinux back to optional

On Thu, 7 Feb 2008 07:02:40 +0100, Christian Perrier <bubulle@debian.org> said: 

> I slightly disagree. Not that I have doubts about your commitment, but
> this entire discussion showed that SELinux is, right now, not ready
> for being included in default installs. As D-I is preparing a beta
> release, it could be better to downgrade selinux stuff to optional
> before that release.

        Could we have some concrete guidelines about what needs to be in
 place before SELinux could be considered "ready" ?

> It can still be reactivated later in case the progress you bring
> proves to be enough for this.

> Possible alternative: create a tasksel's task to include it, which
> would make testing of installs with SELinux by default easier. Being
> something not really end user-oriented, that would have to be a
> "hidden" task (not shown as a choice by tasksel) that one could choose
> with the appropriate D-I boot option.

        Secondly, what are we considering removing from standard? I
 would be OK with removing the targeted policy from standard; which
 seems to be the largest package out there which is in standard.

        libselinux1 (165KB installed) and libsepol1 (320KB installed)
 seem to be the only required packages; the rest are things we can

        Additionally, in recent libselinux releases, work has been put
 in to slim down the library, and reduce the burden on low space

"Freedom is just Chaos, with better lighting."-Alan Dean Foster "To the
Vanishing Point"
Manoj Srivastava <srivasta@debian.org> <http://www.debian.org/~srivasta/>  
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

Reply to: