Debian SE Linux support
I have just got Debian package installation working properly on SE Linux. I
can now upgrade any package on my system (even the tricky ones like "devfsd"
and "selinux") without any action being blocked by the security system, while
having all processes running in the correct domain, and with a quite
restrictive policy.
This is the subject of my paper for OLS.
Unfortunately no-one else can achieve the same results at the moment because
I will not release my hacked version of dpkg as I am waiting for the dpkg
maintainers to decide the correct method of implementing
hooks/triggers/whatever.
It would be really nice if we could get this feature in dpkg before someone
ports my code to rpm (rpm already has trigger functionality which I believe
to be adequate for this task).
--
If you send email to me or to a mailing list that I use which has >4 lines
of legalistic junk at the end then you are specifically authorizing me to do
whatever I wish with the message and all other messages from your domain, by
posting the message you agree that your long legalistic sig is void.
--
To UNSUBSCRIBE, email to debian-dpkg-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: