Re: [heads up] SELinux support for boltd service

Lukas Vrabec <[email protected]> Tue, 7 Aug 2018 21:02:51 +0200

Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>

Hi All,

Adding builds with boltd SELinux support.

Fedora 28:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1134436

Fedora Rawhide
https://koji.fedoraproject.org/koji/buildinfo?buildID=1134361

SELinux denials please report here:
https://bugzilla.redhat.com/show_bug.cgi?id=1607974

Thanks,
Lukas.

On 08/07/2018 11:19 AM, Lukas Vrabec wrote:
> Hi,
> 
> I saw several bugs where boltd daemon runs as unconfined_service_t. I
> have prepared new SELinux module for it.
> 
> I'll push it to Fedora Rawhide and also Fedora 28 soon. This module will
> be in permissive mode, which means policy for boltd won't be enforced by
> kernel, just AVCs will be logged even if the whole system will be in
> Enforcing state.
> 
> If you'll find some AVCs related to boltd, please use this bugzilla[1]
> to report them.
> 
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1607974.
> 
> Thanks,
> Lukas.
> 


-- 
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]/message/4YGQQ5FSTPVPEIYL4XHH76TP3GKQWTWG/

signature.asc (application/pgp-signature, 488 B)