On 22/05/28 10:28PM, Andreas K. Huettel wrote:
Hi all,
it's time for introducing 22.0 profiles [1] - so if you have any things that need to
be switched in an incompatible way tree-wide, or if you have any suggestions on how
to change our default settings, please reply to this mail with details!
The currently existing systemd/selinux profiles need to be replaced with systemd/hardened and systemd/hardened/selinux profiles. So, instead of
(for example):
default/linux/amd64/20.0/no-multilib/systemd/selinux default/linux/amd64/20.0/systemd/selinux
We would instead have:
default/linux/amd64/20.0/no-multilib/systemd/hardened/selinux default/linux/amd64/20.0/no-multilib/systemd/hardened default/linux/amd64/20.0/systemd/hardened default/linux/amd64/20.0/systemd/hardened/selinux
The takeaway is that the systemd/selinux profiles should have hardened
as a parent for consistency with the other SELinux profiles.
/* Kenton Groombridge */
-----BEGIN PGP SIGNATURE-----
iQKTBAABCgB9FiEEP+u3AkfbrORB/inCFt7v5V9Ft54FAmKbtGxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNG RUJCNzAyNDdEQkFDRTQ0MUZFMjlDMjE2REVFRkU1NUY0NUI3OUUACgkQFt7v5V9F t54p6hAAhaYv3PlURboB0ij21w3weliLARXTdmI6G3BpU44+pbM3dYVQPtt0CGOt r76n4e56TBvLQbAfKcyY+NRDFUDe92n6liBV5bEV6zAntvX7iyxLemHQkSgWfo7U jDBsTy5wrFX1kmYwPOg9w1d43c7IffE6gnfLjVcQqK08Bfe7OK3U9mXct6VVsBDc RQ68iQpups7Qc72ptuTwrnlLWtZqgLvJ/HvC4fHKWbNI/LYBbixwZV362l8PYiJg mn0aIaKrDmwm4DqwCrhF9WfOIsdGS2q7DSI8O2m0K6Jq7pHZqEyKnx9vTdJM6JEB rplY836E4GKRX/HzbOuaesFzuCwIX8OBKNMwplZT8k6B90pA0QJ1UhtSqJQHw3mX IXQDA65ATDrF5BuUhzXAeGyQntYKrUOiZtatvMNVyd1XmIv8fZaMxc9ukfa4tm+4 Vls76U8tIIUpHvRrlR1zrQ6yGHNLn3oosLAelDXlwxJRFHUUrlnK34ItSbYR9gRJ aiXlHMMdPWB+2+D67Sx/mj6zEId04nwalmhIOzpFKT7sQsx7BMpW1za5Amc7J9Xe +w8uChzJrtLyqPBxVEylV79AFLuI6sxKABbTcoZDW6LIGZW4KtLiCo1AhqUwMR/Q d0dESPo9dqfAIoyeq3ZBefjk5ePkajjk96HpHlSbNF5MknzTDko=
=PPDa
-----END PGP SIGNATURE-----
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)