Comments on: Ownership of the Local SE Linux Policy http://etbe.coker.com.au/2008/08/19/ownership-local-se-linux-policy/ Linux, politics, and other interesting things Thu, 09 Feb 2012 01:09:24 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: etbe http://etbe.coker.com.au/2008/08/19/ownership-local-se-linux-policy/comment-page-1/#comment-15404 etbe Wed, 20 Aug 2008 11:23:04 +0000 http://etbe.coker.com.au/?p=715#comment-15404 http://algebraicthunk.net/~dburrows/blog/entry/package-management-sudoku/ It had idly occurred to me that as a result of my comment about Sudoku someone might try to modify Apt to give it the capability to solve such problems. It did not occur to me that Apt might already be able to solve such problems until I read the blog post at the above URL. http://algebraicthunk.net/~dburrows/blog/entry/package-management-sudoku/

It had idly occurred to me that as a result of my comment about Sudoku someone might try to modify Apt to give it the capability to solve such problems. It did not occur to me that Apt might already be able to solve such problems until I read the blog post at the above URL.

]]> By: etbe http://etbe.coker.com.au/2008/08/19/ownership-local-se-linux-policy/comment-page-1/#comment-15397 etbe Wed, 20 Aug 2008 03:27:31 +0000 http://etbe.coker.com.au/?p=715#comment-15397 Anon: Of course you could just run that daemon as unconfined_t and run other daemons in confined domains. Anon: Of course you could just run that daemon as unconfined_t and run other daemons in confined domains.

]]> By: Anonymous http://etbe.coker.com.au/2008/08/19/ownership-local-se-linux-policy/comment-page-1/#comment-15392 Anonymous Tue, 19 Aug 2008 23:06:54 +0000 http://etbe.coker.com.au/?p=715#comment-15392 I avoid SELinux on systems I administrate precisely because using it will require me to write at least some of my own local policies. For example, if I want to set up a daemon running on data in /srv/subdomain.mydomain.org , I'll have to give it explicit access to that directory, beyond normal UNIX permissions. I avoid SELinux on systems I administrate precisely because using it will require me to write at least some of my own local policies. For example, if I want to set up a daemon running on data in /srv/subdomain.mydomain.org , I’ll have to give it explicit access to that directory, beyond normal UNIX permissions.

]]>