Re: [gentoo-hardened] SELinux and NFS

2008-02-24 Thread Loren Bandiera
On Sun, 2008-02-24 at 22:30 +0100, [EMAIL PROTECTED] wrote: > Why do you want mountd to tuch /dev/sdb1 to start with? I thing you > have a > missconfiguration somewhere... /dev/sdb1 is the partition that it's supposed to share. I never had a problem with the NFS config other than with SELinux now

[gentoo-hardened] SELinux and iptables.

2008-02-24 Thread xake
Iptables does not work for me in selinux with the default configuration. To be precise '/etc/init.d/iptables save' fails to write the rules to '/var/lib/iptables/rules-save'. In fact if I do not disable enforcing that file ends up empty no matter if I had or had not anything in it before. dmesg l

Re: [gentoo-hardened] SELinux and NFS

2008-02-24 Thread xake
Why do you want mountd to tuch /dev/sdb1 to start with? I thing you have a missconfiguration somewhere... For me most/all NFS denials went away when I restructured the folder placments on my system to acctually follow "the standard" (i.e. place stuff where NFS are supposed to read/write to them) a

[gentoo-hardened] Re: Hardened with 1 user and 0 services?

2008-02-24 Thread 7v5w7go9ub0o
Alex Efros wrote: Hi! On Sun, Feb 24, 2008 at 06:15:22AM -0800, Grant wrote: Are a hardened profile, kernel, and related USE flags beneficial on a machine on which only I log in and no ports are open? If you open website, or download and run mp3, or download and open .xls, etc. - do any actio

[gentoo-hardened] SELinux and NFS

2008-02-24 Thread Loren Bandiera
I've got a server setup with the selinux/2007.0/amd64 profile. I've got most of my services working but I'm having an issue with NFS. # uname -a Linux foo 2.6.24-gentoo-r2 #3 SMP Tue Feb 19 17:58:43 EST 2008 x86_64 Intel(R) Xeon(R) CPU E5310 @ 1.60GHz GenuineIntel GNU/Linux # sestatus SELinux st

Re: [gentoo-hardened] Hardened with 1 user and 0 services?

2008-02-24 Thread Alex Efros
Hi! On Sun, Feb 24, 2008 at 06:15:22AM -0800, Grant wrote: > Are a hardened profile, kernel, and related USE flags beneficial on a > machine on which only I log in and no ports are open? If you open website, or download and run mp3, or download and open .xls, etc. - do any action which result in

[gentoo-hardened] Hardened with 1 user and 0 services?

2008-02-24 Thread Grant
Are a hardened profile, kernel, and related USE flags beneficial on a machine on which only I log in and no ports are open? - Grant -- gentoo-hardened@lists.gentoo.org mailing list