Hi All,
I am following the selinux-guide Sven updated recently on a VM with a
clean install.
I started with the hardened stage 3 as recommended and am using the latest
stable hardened sources.
At step 4.2.2 (Install policies and utilities) the emerge fails with the
error:
/usr/bin/install: canno
On Sat, October 15, 2011 8:41 pm, Sven Vermeulen wrote:
> Thoughts and comments always welcome. Saying "Current one is better" is
> also accepted ;)
Hi Sven,
Thank you for your work on this. I am currently using the guide to see how
SELinux works.
In 4.1.5, the only ~arch package that is listed
On Wed, October 19, 2011 2:35 pm, Sven Vermeulen wrote:
> On Wed, Oct 19, 2011 at 02:32:14PM +0200, J. Roeleveld wrote:
>> I am following the selinux-guide Sven updated recently on a VM with a
>> clean install.
>> I started with the hardened stage 3 as recommended and a
On Wed, October 19, 2011 2:38 pm, Sven Vermeulen wrote:
> On Wed, Oct 19, 2011 at 02:35:31PM +0200, J. Roeleveld wrote:
>> Are there any other packages that need to be unmasked?
>
> There shouldn't be, although we're quite near a stabilization of the more
> recent users
On Wed, October 19, 2011 2:38 pm, Sven Vermeulen wrote:
> On Wed, Oct 19, 2011 at 02:35:31PM +0200, J. Roeleveld wrote:
>> Thank you for your work on this. I am currently using the guide to see
>> how
>> SELinux works.
>>
>> In 4.1.5, the only ~arch package tha
On Wed, October 19, 2011 2:51 pm, Sven Vermeulen wrote:
> On Wed, Oct 19, 2011 at 2:46 PM, J. Roeleveld wrote:
>> If you think it is usefull, can you provide me with a list of which
>> packages and versions are going to be stabilized soon and I will do the
>> test with th
On Wed, October 19, 2011 2:56 pm, Sven Vermeulen wrote:
> On Wed, Oct 19, 2011 at 2:54 PM, J. Roeleveld wrote:
>> To the latest ~amd64? Or to which version? :)
>
> Latest is fine (for now ;-)
>
> Wkr,
> Sven Vermeulen
Ok, selecting latest.
Compared to the latest snapsh
On Wednesday 02 September 2015 12:13:33 Anthony G. Basile wrote:
> I'm hoping that once this company feels the sting of what has just
> happened, they'll come back to the table and talk with Grsec/PaX people.
> They won't be able to ship boards with grsec anymore because its not so
> easy to switc