using selinux to control user access to files

Mon May 9 15:31:20 UTC 2005

On Mon, 09 May 2005 08:38:55 EDT, Stephen Smalley said:
> On Mon, 2005-05-09 at 13:29 +0200, Hein Coulier wrote:

> Ah, unfortunately RHEL4 didn't ship with a strict policy included.
> You can take it up with your Red Hat support person, or grab the
> selinux-policy-strict* packages from Fedora Core (in the latter case,
> you will likely want to also upgrade your other SELinux-related
> packages, e.g. libsepol, libsepol-devel, libselinux, libselinux-devel,
> checkpolicy, policycoreutils, setools, setools-gui).

Modulo the support issues, there any known gotchas of running a basically RHEL4
box with the userspace pieces from FC4 (missing kernel support, etc), or is it
something that will pretty much work?  (And yes, I know that getting things
working like Apache serving up PHP scripts that call mysql are *my* problem -
I'm more worried about things sneaking up and biting me on the tookus while I'm
busy trying to get that stuff working...)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20050509/c7124e02/attachment.sig>