SELinux patches
Policy patches and additional modules for SELinux as distributed in Debian Etch
Introduction
While implementing a (targeted) SELinux policy on my server, I found several problems in the policies as present in Debian Etch. As others may have the same problems, I am starting to collect my own patches here.
At the moment, there is a module that allows telnetd to work properly if you use the Debian telnetd or telnetd-ssl packages, and a module that allows hpssd to work properly if you use the Debian hplip package.
Current release
The current release consists of two packages:
Telnet patch
The telnetd and telnetd-ssl packages in Debian do not work with the selinux policies in etch (because /usr/lib/telnetlogin is not executable for the telnet daemon). This package contains a module that will solve this problem.Cups-hplip patch
The hplip package in Debian does not work with the selinux policies in etch (because the hpssd daemon is installed with a symlink, and at an unexpected location). This package contains a module that will solve these problems.
Debian package
Debian packages can be found at the Debian download page.
Documentation
The following documentation is available online:
- The cupshplippatch README and INSTALL files
How to install this SELinux module - The telnetpatch README and INSTALL files
How to install this SELinux module