Re: [gentoo-hardened] SELinux policy and openrc

2011-05-15 Thread Sven Vermeulen
On Sun, May 15, 2011 at 12:25:32AM +0200, Sven Vermeulen wrote: > I just pushed selinux-base-policy-2.20101213-r15 to hardened-dev.git > overlay. It does not resolve all problems, but at least Gentoo Hardened with > SELinux now boots up properly with OpenRC (and the Gentoo SELinux handbook > has be

[gentoo-hardened] How openrc check the state of services?

2011-05-15 Thread Tóth Attila
Just switched to openrc + baselayout2. Using grsecurity RBAC. During the shutdown process I see endless countdowns for each service waiting for others. It is obvious, that something prevents the rc system to detect if a service is stopped or not. I have to insert a rule for a binary. The question

Re: [gentoo-hardened] How openrc check the state of services?

2011-05-15 Thread Sven Vermeulen
It is the /sbin/rc binary which uses the information in /lib64/rc/init.d (a tmpfs mount). The tmpfs location has directories like "started" in which symlinks exist to the files in /etc/init.d. Wkr, Sven Vermeulen On Mon, May 16, 2011 at 2:49 AM, "Tóth Attila" wrote: > Just switched to openrc