SELinux on Desktop Profile

wraeth <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
Greetings;

Not sure if this is the right list to ask in, but I figure I'll go ahead
and ask anyway.

At the moment I'm currently on the 13.0/desktop/gnome/systemd profile,
and I'd like to enable SELinux.  I know that there is a 13.0/selinux
profile (as well as the hardened profiles) but I was wondering if
there's any documentation (or perhaps someone can offer some guidance)
on doing this while maintaining the current profile.

I've had a look at the SELinux handbook [1], however it only says to
perform the migration using the profiles (and the 'selinux' use flag is
always marked as "do not do this yourself").

My concern is that if I were to migrate to the 13.0/selinux profile, I
would also loose all of the profile default use flags, masks, etc. that
the current profile enables.

I could go through the time and effort of identifying the changes
between the profiles, but that would be a lot of work for only a
potential success (I'd probably end up missing something); besides, I
don't feel that would be the "right" way to do it.

Any suggestions or pointers would be greatly appreciated.

Cheers;
wraeth

[1] http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml
signature.asc (application/pgp-signature, 230 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iF4EABEIAAYFAlMVqDMACgkQGYlqHeQRhkw2owD9HhGB0SS6A5/61pKxl0VaMM8O
/6rCyC+bDQTZkpUuVsIA/RI3NT1Iwy+H3b1Y+n7oUY4GdV71hvw6w9sD7CufiDiH
=+3jv
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.