SELinux policy update wishlist

Questions, comments, or suggestions on how to improve the EnGarde Secure Linux community.

Moderators: scrumpy, Dave, leihog

SELinux policy update wishlist

Postby leihog on Sun Mar 28, 2010 6:42 am

These are some SELinux updates I'd like to see in Engarde.

git - hosting the service, as well as shell access via ssh, and permission for the httpd domain to read git repositories.

scp - I'd like to be able to scp files to and from the server without setting selinux in permissive mode

mysql - I'd like to be able to use the mysql command to connect to local socket in enforcing mode. Atleast as staff.


These are the ones that I'm missing the most.
If you would like some other update to the engarde selinux policy then post it here.
leihog
 
Posts: 15
Joined: Mon Jun 26, 2006 2:33 pm
Location: Sweden

Re: SELinux policy update wishlist

Postby Dave on Tue Mar 30, 2010 10:27 am

leihog wrote:These are some SELinux updates I'd like to see in Engarde.

git - hosting the service, as well as shell access via ssh, and permission for the httpd domain to read git repositories.

scp - I'd like to be able to scp files to and from the server without setting selinux in permissive mode

mysql - I'd like to be able to use the mysql command to connect to local socket in enforcing mode. Atleast as staff.
Yes great suggestions. There's no reason these shouldn't have already been added. Virtually all of our time has been spent working on the core system and upgrading all the components first, but this will also come.

Thanks,
Dave
Dave
Site Admin
 
Posts: 107
Joined: Tue Jun 13, 2006 6:06 pm


Return to Suggestions

Who is online

Users browsing this forum: No registered users and 1 guest

cron