[Fedora-packaging] SELinux testing

James Morris jmorris at redhat.com
Fri Sep 8 22:56:30 UTC 2006


On Sat, 9 Sep 2006, Hans Ulrich Niedermann wrote:

> James Morris <jmorris at redhat.com> writes:
> 
> > This guideline would request that developers test their package with 
> > SELinux enabled (and by this I mean in enforcing mode) and follow a simple 
> > procedure:
> >
> > 1. Ensure they have the latest SELiunx policy installed.
> > 2. Boot with selinux=1 and in enforcing mode.
> > 3. Perform the normal testing of their application.
> 
> Using which policy? targeted? strict? mls?
> 
> Testing with "targeted" should be a "MUST" requirement IMHO, but
> requiring "strict" or "mls" will cause problems.

Yes, we only worry about targeted for general users.



-- 
James Morris
<jmorris at redhat.com>





More information about the Fedora-packaging mailing list