Adding two new booleans to httpd to tighten it's security.

Ulrich Drepper drepper at redhat.com
Sat Dec 10 21:38:15 UTC 2005


Nicolas Mailhot wrote:
> So there are lots of work to do with existing rules before even thinking
> of moving to new bits like httpd port policy.

You do not understand the situation and my comments at all: the changes 
which cause problems due to execmod and execmem errors must be fixed in 
the programs.  "Adding" these errors in independent of fixing up the 
policy for currently failing but valid programs.

-- 
➧ Ulrich Drepper ➧ Red Hat, Inc. ➧ 444 Castro St ➧ Mountain View, CA ❖




More information about the fedora-selinux-list mailing list