[redhat-lspp] LSPP kickstart config v0.45 released

Klaus Weidner klaus at atsec.com
Sat Apr 21 00:07:16 UTC 2007


Hello all,

since things seemed to be settling down, here are some more radical
changes to keep things exciting ;-)

Changes in 0.45 (trivial changes collapsed):

    postinst: add opportunity/reminder to change system time (thanks George)

    Limit privileged /sbin/consoletype to admin, provide nonpriv copy for users
    
	    The /sbin/consoletype program uses consoletype_t to gain MLS
	    override privileges. This privilege is not directly available
	    to normal users, but the analysis to verify this nontrivial.
	    It's also not necessary. Create a copy of the program with no
	    special privileges, and change the /etc/profile.d/lang.*
	    files to use that one instead.

    rbac-self-test: add environment scrubbing flag (thanks George)

    spec file: set rbac-self-test mode bits to 0 for g and o (thanks George)

    preinst: support using multiple disks for the logical volume group install
    
	    When prompted for the install disk, supply a comma separated
	    list of disks to install on, for example "sda,sdb", the
	    logical volume used for the install will then span across all
	    of them. Also works for the installer command line, for
	    example "instdisk=dasda,dasdb,dasdc".

    packages: new ipsec-tools and selinux-policy

Please get the packages the script requests in the postinstall phase from
the http://people.redhat.com/sgrubb/files/lspp/ repository.

Workarounds:

If the script requires a package that has been replaced by a newer one in
the repository, you can do a quick&dirty workaround instead of starting
over - put the newer .rpm file in /root/rpms/ and rename it to the
expected old name in a "!" escape. If you need to do that, please let me
know what the new version is (preferably as a patch to the
lspp-config/kickstart/src/rpms.lst file, which is the source for the list
in the individual kickstart files).

RPM download:

   http://klaus.vh.swiftco.net/lspp/SRPMS/
   http://klaus.vh.swiftco.net/lspp/RPMS/noarch/

Git repository:

   http://klaus.vh.swiftco.net/lspp/git/

-Klaus




More information about the redhat-lspp mailing list