Re: SeLinux integration
On Sun, 2008-08-17 at 12:44 +0200, Jens Neuhalfen wrote:
Show 33 quoted lines
> Hi,
>
> I wrote an SeLinux policy and an init.d script for the git-daemon
> and now seek for comments and improvements.
>
> The scripts were tested on my Centos 5.2 box and an older version had
> been tested on FC 9.
>
> Features:
> * multiple configuration files for the init.d script
> * selinux support for git daemon
> * seboolean (git_daemon_update_repository) that forces git-daemon
> into strict read-only mode when set to false
>
> TODO
> * The policy and the accompanying init.d script still lack
> documentation
> * see selinux/BUGS and initd/BUGS
>
> Feel free to pull from my repository and comment. If the everything is
> 'good' I will send patches to the list, so that SeLinux support can be
> integrated into the main repository.
>
>
> git://www.neuhalfen.name/git-selinux.git
>
>
> Jens
>
> --
> To unsubscribe from this list: send the line "unsubscribe git" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
Hello,
It is great to see people other than the core policy developers
working on SELinux policy. One thing I would suggest is to post your
policy to the new reference policy mailing list for SELinux. This way
people such as Chris PeBenito and Dan Walsh can look over it and give
suggestions as well. You can find the list at the link below [1].
[1]http://oss.tresys.com/mailman/listinfo/refpolicy
Dave