Randy McMurchy wrote:
> Hi all,
> 
> Both D-BUS and HAL look for a SELinux-enabled system. I have no
> clue about SELinux, as I've never looked into it. Best I can tell
> you must patch the kernel sources with the NSA SELinux patches,
> then install some userland tools to use the SELinux-patched kernel.

You don't need to patch the kernel any more.  It is there.  From `make
xconfig`:

NSA SELinux Support (SECURITY_SELINUX)

This selects NSA Security-Enhanced Linux (SELinux).
You will also need a policy configuration and a labeled filesystem.
You can obtain the policy compiler (checkpolicy), the utility for
labeling filesystems (setfiles), and an example policy configuration
from <http://www.nsa.gov/selinux/>.
If you are unsure how to answer this question, answer N.

I don't think we should address SELinux at all in BLFS.  If it is
mentioned at all it should be in HLFS.

  -- Bruce
-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to