SELinux on Desktop Profile
wraeth <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
Greetings; Not sure if this is the right list to ask in, but I figure I'll go ahead and ask anyway. At the moment I'm currently on the 13.0/desktop/gnome/systemd profile, and I'd like to enable SELinux. I know that there is a 13.0/selinux profile (as well as the hardened profiles) but I was wondering if there's any documentation (or perhaps someone can offer some guidance) on doing this while maintaining the current profile. I've had a look at the SELinux handbook [1], however it only says to perform the migration using the profiles (and the 'selinux' use flag is always marked as "do not do this yourself"). My concern is that if I were to migrate to the 13.0/selinux profile, I would also loose all of the profile default use flags, masks, etc. that the current profile enables. I could go through the time and effort of identifying the changes between the profiles, but that would be a lot of work for only a potential success (I'd probably end up missing something); besides, I don't feel that would be the "right" way to do it. Any suggestions or pointers would be greatly appreciated. Cheers; wraeth [1] http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml
signature.asc
(application/pgp-signature, 230 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iF4EABEIAAYFAlMVqDMACgkQGYlqHeQRhkw2owD9HhGB0SS6A5/61pKxl0VaMM8O /6rCyC+bDQTZkpUuVsIA/RI3NT1Iwy+H3b1Y+n7oUY4GdV71hvw6w9sD7CufiDiH =+3jv -----END PGP SIGNATURE-----