Hey Sven,
I've been reading through your wonderful handbook,
http://www.gentoo.org/proj/en/hardened/selinux/selinux-
handbook.xml?part=2&chap=5
, about modifying the SELinux policy in Gentoo but was hoping you could
provide a little more specific advice about the how to write SELinux policies
for personal projects:
* What's the best way to store this? With the project or as a separate code
repository or as a contribution to upstream policies?
* Is writing live ebuilds for selinux policies recommended or frowned upon?
* Where should my policy live in the long run?
* Is there anything else that you can recommend for writing policies of this
kind?
Thanks for any advice or best practices you can share.
Regards,
--
Alex Brandt
Sales Engineer for Rackspace, RHCE
http://www.alunduil.com
I've been reading through your wonderful handbook,
http://www.gentoo.org/proj/en/hardened/selinux/selinux-
handbook.xml?part=2&chap=5
, about modifying the SELinux policy in Gentoo but was hoping you could
provide a little more specific advice about the how to write SELinux policies
for personal projects:
* What's the best way to store this? With the project or as a separate code
repository or as a contribution to upstream policies?
* Is writing live ebuilds for selinux policies recommended or frowned upon?
* Where should my policy live in the long run?
* Is there anything else that you can recommend for writing policies of this
kind?
Thanks for any advice or best practices you can share.
Regards,
--
Alex Brandt
Sales Engineer for Rackspace, RHCE
http://www.alunduil.com