Jump to Navigation

SELinux patches

Policy patches and additional modules for SELinux as distributed in Debian Etch

Maintenance status: 
Mostly of historic interest

Introduction

While implementing a (targeted) SELinux policy on my server, I found several problems in the policies as present in Debian Etch. As others may have the same problems, I am starting to collect my own patches here.

At the moment, there is a module that allows telnetd to work properly if you use the Debian telnetd or telnetd-ssl packages, and a module that allows hpssd to work properly if you use the Debian hplip package.

Current release

The current release consists of two packages:

  • Telnet patch
    The telnetd and telnetd-ssl packages in Debian do not work with the selinux policies in etch (because /usr/lib/telnetlogin is not executable for the telnet daemon). This package contains a module that will solve this problem.

  • Cups-hplip patch
    The hplip package in Debian does not work with the selinux policies in etch (because the hpssd daemon is installed with a symlink, and at an unexpected location). This package contains a module that will solve these problems.

Debian package

Debian packages can be found at the Debian download page.

Documentation

The following documentation is available online:

Downloads



Project | by Dr. Radut