Latest Seamonkey update

Jim Cornette fc-cornette at insight.rr.com
Wed Aug 16 02:42:48 UTC 2006


Rahul wrote:
> Jim Cornette wrote:
> 
>> I don't mind the browser being replaced with an individual application 
>> vs a suite of integrated applications for email, browsing and editing. 
>> I miss the missing editing feature the most.
>>
>> How in the world do you get seamonkey and its corresponding .so files 
>> into the selinux fold? Or better yet, are there guidelines and 
>> assistance given to the Fedora-Extras maintainer that allow their rpms 
>> to set items to the needed SELinux content, in order to work out of 
>> the box?
>>
> 
> Just file a bug report with the relevant information in this thread. 
> There is a draft guide that package maintainers can follow to write 
> policies when required. SELinux denials can also indicate broken code 
> which needs to be fixed.
> 
> http://fedoraproject.org/wiki/PackagingDrafts/SELinux/PolicyModules
> 
> For end user docs, see http://fedoraproject.org/wiki/SELinux
> 
> Rahul
> 

Thanks for the links. I am still having troubles grasping the management 
of SELinux. It is debatable as to how far one is willing to venture in 
order to get a desired program to work or just render SELinux totally 
ineffective by putting it in permissive or disabling it altogether.

With a modification applied that firefox and thunderbird use in selinux 
policies, seamonkey works again and SELinux is crippled as it is for 
other mozilla derived applications. It is active again though.

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=202642
leads to the previously discussed bug which was closed. Comment #8 from 
the close bug report works to allow SELinux to remain in enforcing 
instead of disabled systemwide.

Jim

-- 
Magary's Principle:
	When there is a public outcry to cut deadwood and fat from any
	government bureaucracy, it is the deadwood and the fat that do
	the cutting, and the public's services are cut.




More information about the fedora-list mailing list