Is there any IPsec-Tools policy available in FC2?

[petre rodan]

Hi,

Park Lee wrote:
> Hi,
>   Is there a IPsec-Tools [1] (i.e. racoon, setkey)
> policy made for SELinux in Fedora Core 2 ?

latest Gentoo policies can be found here:

http://dev.gentoo.org/~kaiowas/policy/gentoo/domains/program/ipsec.te
http://dev.gentoo.org/~kaiowas/policy/gentoo/file_contexts/program/ipsec.fc

net_contexts should also contain:
ifdef(`ipsec.te', `portcon udp 500 system_u:object_r:isakmp_port_t')

if you tweak the file contexts for Fedora, please also send us the changes.

bye,
peter

>
> Thank you.
>
> [1] http://ipsec-tools.sourceforge.net/
>
> =====
> Best Regards,
> Park Lee



--
petre rodan
<kaiowas at gentoo.org>
Developer,
Hardened Gentoo Linux
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20050112/3d378a83/attachment.sig>