SELinux patches: Policy patches and additional modules

Note that this was created for Debian Etch. It is at most of historic interest. There will be no updates or further releases.

Introduction

While implementing a (targeted) SELinux policy on my server, I found several problems in the policies as present in Debian Etch. As others may have the same problems, I am starting to collect my own patches here.

At the moment, there is a module that allows telnetd to work properly if you use the Debian telnetd or telnetd-ssl packages, and a module that allows hpssd to work properly if you use the Debian hplip package.

Download

This software is licensed by the Gnu General Public License.

Debian users can also use the APT archive.

Telnet patch

The telnetd and telnetd-ssl packages in Debian do not work with the selinux policies in etch (because /usr/lib/telnetlogin is not executable for the telnet daemon). This package contains a module that will solve this problem.

Cups-hplip patch

The hplip package in Debian does not work with the selinux policies in etch (because the hpssd daemon is installed with a symlink, and at an unexpected location). This package contains a module that will solve these problems.

Frodo Looijaard, frodo@frodo.looijaard.name
Last changed on 2013-11-06