Policy patches and additional modules for SELinux as distributed in Debian Etch
While implementing a (targeted) SELinux policy on my server, I found several problems in the policies as present in Debian Etch. As others may have the same problems, I am starting to collect my own patches here.
At the moment, there is a module that allows telnetd to work properly if you use the Debian telnetd or telnetd-ssl packages, and a module that allows hpssd to work properly if you use the Debian hplip package.
The current release consists of two packages:
The telnetd and telnetd-ssl packages in Debian do not work with the selinux policies in etch (because /usr/lib/telnetlogin is not executable for the telnet daemon). This package contains a module that will solve this problem.
The hplip package in Debian does not work with the selinux policies in etch (because the hpssd daemon is installed with a symlink, and at an unexpected location). This package contains a module that will solve these problems.
Debian packages can be found at the Debian download page.
The following documentation is available online: