Re: [gentoo-hardened] Feedback on article recommending Gentoo for SELinux

2015-07-13 Thread Jason Zaman
On Sun, Jul 12, 2015 at 04:46:03PM -0700, S. Lockwood-Childs wrote: > I'd appreciate feedback on a blog-style article[1] talking about > how CIL is going to improve SELinux policy maintenance, and in > particular, the last section where I try to point out how good Gentoo > is for experimenting wi

Re: [gentoo-hardened] Feedback on article recommending Gentoo for SELinux

2015-07-13 Thread Sven Vermeulen
On Mon, Jul 13, 2015 at 1:31 PM, Jason Zaman wrote: > Overall a good article. One thing which I would also point out together > with the move to CIL is that there is now no "base" module. In the 2.3 > and earlier userlands, all the important things were in "base.pp" and > then other things were ad

Re: [gentoo-hardened] Feedback on article recommending Gentoo for SELinux

2015-07-13 Thread Jason Zaman
On Mon, Jul 13, 2015 at 03:02:55PM +0200, Sven Vermeulen wrote: > On Mon, Jul 13, 2015 at 1:31 PM, Jason Zaman wrote: > > Secondly, related to "poor support for preserving local changes across > > system updates". The tools now have the concept of priority so users can > > easy completely replace

Re: [gentoo-hardened] Feedback on article recommending Gentoo for SELinux

2015-07-13 Thread Sven Vermeulen
On Mon, Jul 13, 2015 at 3:51 PM, Jason Zaman wrote: > On Mon, Jul 13, 2015 at 03:02:55PM +0200, Sven Vermeulen wrote: >> On Mon, Jul 13, 2015 at 1:31 PM, Jason Zaman wrote: >> > Secondly, related to "poor support for preserving local changes across >> > system updates". The tools now have the con

Re: [gentoo-hardened] Feedback on article recommending Gentoo for SELinux

2015-07-13 Thread Sven Vermeulen
On Mon, Jul 13, 2015 at 1:46 AM, S. Lockwood-Childs wrote: > I'd appreciate feedback on a blog-style article[1] talking about > how CIL is going to improve SELinux policy maintenance, and in > particular, the last section where I try to point out how good Gentoo > is for experimenting with SELinux