[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#333834: marked as done (linux-2.6: Please enabled "audit" support, selinux is pretty much unuseable otherwise.)



Your message dated Fri, 4 Nov 2005 19:57:00 -0800 (PST)
with message-id <Pine.LNX.4.63.0511041956050.3103@bobcat>
and subject line Bug#333834: Please enable "audit" support
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 13 Oct 2005 22:38:21 +0000
>From erich@debian.org Thu Oct 13 15:38:21 2005
Return-path: <erich@debian.org>
Received: from legolas.drinsama.de [62.91.17.164] (postfix)
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1EQBiP-0005A0-00; Thu, 13 Oct 2005 15:38:21 -0700
Received: from localhost (localhost [127.0.0.1])
	by localhost (Postfix) with ESMTP id 8A59DC4C090;
	Fri, 14 Oct 2005 00:38:20 +0200 (CEST)
Received: from legolas.drinsama.de ([127.0.0.1])
	by localhost (legolas [127.0.0.1]) (amavisd-new, port 10024)
	with SMTP id 12140-09; Fri, 14 Oct 2005 00:38:19 +0200 (CEST)
Received: from wintermute.xmldesign.de (p549A1B9E.dip0.t-ipconnect.de [84.154.27.158])
	by legolas.drinsama.de (Postfix) with ESMTP id BCC2AC4C083;
	Fri, 14 Oct 2005 00:38:19 +0200 (CEST)
Received: by wintermute.xmldesign.de (Postfix, from userid 1000)
	id 7ABD32348FC; Fri, 14 Oct 2005 00:37:51 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Erich Schubert <erich@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
X-Debbugs-No-Ack: please
Subject: linux-2.6: Please enabled "audit" support,
 selinux is pretty much unuseable otherwise.
X-Mailer: reportbug 3.17
Date: Fri, 14 Oct 2005 00:37:51 +0200
Message-Id: <20051013223751.7ABD32348FC@wintermute.xmldesign.de>
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at mucl.de
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
	X_DEBBUGS_NO_ACK autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: linux-2.6
Severity: normal

While you can run SELinux just fine without audit enabled, it's next to
impossible to write or debug SELinux policy without it. But SELinux
hasn't reached the stage where there is a perfect policy for everything,
so users need to have the ability to debug their policy (or write new
for applications htere is no policy for yet)

Please enable audit in the debian kernels ASAP.

The kernels are unuseable for typical SELinux deployment otherwise.

Thank you.

---------------------------------------
Received: (at 333834-done) by bugs.debian.org; 5 Nov 2005 03:56:50 +0000
>From jurij@wooyd.org Fri Nov 04 19:56:50 2005
Return-path: <jurij@wooyd.org>
Received: from mouth.voxel.net (mail.squishy.cc) [69.9.180.118] (postfix)
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1EYFAg-0003st-00; Fri, 04 Nov 2005 19:56:50 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
	by mail.squishy.cc (Postfix) with ESMTP id 340EB5898007
	for <333834-done@bugs.debian.org>; Fri,  4 Nov 2005 22:56:59 -0500 (EST)
Date: Fri, 4 Nov 2005 19:57:00 -0800 (PST)
From: Jurij Smakov <jurij@wooyd.org>
Reply-To: jurij@wooyd.org
To: 333834-done@bugs.debian.org
Subject: Re: Bug#333834: Please enable "audit" support
In-Reply-To: <1131149534.1355.25.camel@wintermute.xmldesign.de>
Message-ID: <Pine.LNX.4.63.0511041956050.3103@bobcat>
References: <Pine.LNX.4.63.0511032142430.6454@bobcat>
 <1131149534.1355.25.camel@wintermute.xmldesign.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Delivered-To: 333834-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Version: 2.6.14-2

On Sat, 5 Nov 2005, Erich Schubert wrote:

> Hi,
>> CONFIG_AUDIT=y
>> # CONFIG_AUDITSYSCALL is not set
>
> According to #selinux at Freenode this is just fine that way.
> Sorry, I wasn't sure which of them is needed for what.
>
> best regards,
> Erich Schubert

Thanks for feedback. I'm closing this bug.

Best regards,

Jurij Smakov                                        jurij@wooyd.org
Key: http://www.wooyd.org/pgpkey/                   KeyID: C99E03CC



Reply to: