Re: SELinux on Wheezy

["C.J. Adams-Collier KF7BMP" <cjac@colliertech.org>]

[-- Attachment #1: Type: text/plain, Size: 1735 bytes --]

On Wed, 2012-02-08 at 12:54 -0500, Stephen Smalley wrote:
> On Wed, 2012-02-08 at 09:39 -0800, C.J. Adams-Collier KF7BMP wrote:
> > On Wed, 2012-02-08 at 08:24 -0500, Stephen Smalley wrote:
> > > On Tue, 2012-02-07 at 13:05 -0800, C.J. Adams-Collier wrote:
> > > > cjac@foxtrot:~$ sudo which seinfo
> > > > cjac@foxtrot:~$ apt-file search seinfo | grep bin | wc -l
> > > > 0
> > > 
> > > seinfo is part of the setools package.
> > 
> > $ apt-cache search -n setools
> > erlang-parsetools - Erlang/OTP parsing tools
> > 
> > Hmm.
> > 
> > Would it be safe to build seinfo from source and use it along with the
> > distro-installed tools?  If so, what's the git repo I should clone from?
> 
> Curious, as setools is packaged for Debian squeeze per
> packages.debian.org.  Did the package go un-maintained before wheezy?
> 
> Upstream is at:
> http://oss.tresys.com/projects/setools

cjac@foxtrot:/usr/src/git/debian/setools$ git log | head -5
commit 22a5d3e451d8a1e60a3c746466c865e63089a92a
Merge: fa238f0 149e283
Author: Manoj Srivastava <srivasta@debian.org>
Date:   Tue Jul 20 23:10:06 2010 -0700

I guess it has been unmaintained.  I just sent an email off to srivasta@
requesting some help getting the package built.

> > $ locate xserver.pp
> > /usr/share/selinux/default/xserver.pp
> > 
> > I'll run semodule -i after this morning's reboot.  I installed mutt
> > yesterday, so I'll work from the console until you folks sign off for
> > the evening.
> 
> I'd suggest installing all of the .pp files to ensure you aren't missing
> anything else.  The man page for semodule has some examples of how to
> install all modules from a directory.

What's the best way to do this at boot?



[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 490 bytes --]