[Pkg-shadow-devel] Bug#387480: The possibility of SELinux targeted policy in the default install

Christian Perrier bubulle at debian.org
Fri Sep 15 06:21:21 UTC 2006


Quoting Steve Langasek (vorlon at debian.org):
> On Thu, Sep 14, 2006 at 11:54:34PM +0200, Erich Schubert wrote:
> > Hi Manoj, Russell, Debian-Boot,
> > Thinking some more about it, I have large doubts that we'll have a
> > somewhat working SELinux out of the box with etch. There is still quite
> > some stuff we would need to do some auto setup magic (or at least
> > convince the maintainers).
> > For example both /etc/pam.d/login and /etc/pam.d/ssh need to be
> > modified. The modification in ssh is in, just needs to be uncommented. I
> > think Uwe just contacted the shadow maintainers about the login change.
> 
> Could you remind me why this module is specific to /etc/pam.d/ssh and
> /etc/pam.d/login, rather than something that should be enabled in the global


The same question has been asked in #387480 (adding pam_selinux for login),
indeed..




-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060915/00a2d91d/attachment.pgp


More information about the Pkg-shadow-devel mailing list