[ubuntu-hardened] SELinux support in upstart

Paul Sladen ubuntu at paul.sladen.org
Sun Mar 18 03:39:58 GMT 2007


On Sat, 17 Mar 2007, Chad Sellers wrote:
> On Mar 17, 2007, at 11:15 PM, Paul Sladen wrote:
> > On Sat, 17 Mar 2007, Chad Sellers wrote:
> > > I just checked out the status of SELinux in Ubuntu for the first time
> > > in a while by looking at Feisty Herd 5.
> > Chad: perhaps you could outline what support needs adding.
> I meant support for loading policy, similar to what sysvinit already does.
> SELinux policy needs to be loaded very early in the boot process

Currently upstart is being used in compatibility mode where it simply runs
the existing 'sysvinit' startup scripts, so it's likely that this still
works as expected (this would be a useful experiment to test if you have a
working setup).

> Let me know if you'd like more detail.

When tasks move to native upstart configuration files then is sounds like it
will be necessary to add in this support;  yes, certainly, any more
(low-level) details about exactly what needs doing would be most useful.

	-Paul
-- 
Why do one side of a triangle when you can do all three.   Nottingham, GB




More information about the ubuntu-hardened mailing list