Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Questions about selinux
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Fulgurance
Guru
Guru


Joined: 15 Feb 2017
Posts: 598

PostPosted: Tue Jan 15, 2019 2:28 pm    Post subject: Questions about selinux Reply with quote

Hello, i have questions about selinux.

1 - I would like to switch to enforcing selinux mode. Gentoo start fine but when xdm try to start, my pc stay on black screen with mouse cursor. And when i switch to TTY to debug this problem, console mode make many many times to connect to an account and to run any commands. Is it possible enforced mode slow down extremely my system? And how i can see what is problem with xdm and enforced mode ? Selinux can block my display manager ?

2 - In selinux Gentoo book, it's recommended to enable SELinux booleans with hardened-sources, but this package is now missing. This feature is it available with gentoo-sources ?
Back to top
View user's profile Send private message
ctylin
n00b
n00b


Joined: 31 Dec 2018
Posts: 3

PostPosted: Sat Jan 19, 2019 1:22 pm    Post subject: Reply with quote

Selinux is a very delicate package "I read in other post" please see here if it helps: https://forums.gentoo.org/viewtopic-t-1090394.html
Back to top
View user's profile Send private message
papas
Tux's lil' helper
Tux's lil' helper


Joined: 01 Dec 2014
Posts: 80
Location: Athens

PostPosted: Sat Jan 19, 2019 2:28 pm    Post subject: Reply with quote

make your own policy (audit2allow is the easiest way) :
https://linux.die.net/man/1/audit2allow
P.s.
the question is:
is it worth it to run selinux under graphical environment?
Back to top
View user's profile Send private message
Fulgurance
Guru
Guru


Joined: 15 Feb 2017
Posts: 598

PostPosted: Fri Jan 25, 2019 11:53 pm    Post subject: Reply with quote

It's my post lol, i know it very well :lol:

Do you think it's worth ? But it's normal to use graphical environment, i'm sure selinux is usable with graphical environment. This software is made for NSA, i don't think they never use graphical environment...
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum