More SeLinux

  • hescominsoon
  • 06/20/07
  • Offline
Posted: Tue, 2007-04-17 11:09

It would be nice if webmin had a module allowing you to easily manage, edit, and create SELinux policies.


Re: More SeLinux

  • Joe
  • 10/23/08
  • Offline
  • Tue, 2007-04-17 20:16

Hey William,

Agreed. It's on the todo list. (Unfortunately, SELinux has the worst configuration process on the planet. It's downright baroque. Leave it to the government to build something so elaborate...Even POSIX ACLs are simpler.)

We'll probably need libselinux bindings for Perl to get it right, which don't exist yet, so we'll have to write them ourselves (which is a pretty huge project in and of itself), though we might punt in the short term and just call the appropriate command line utilities (which'll work just fine, but be a bit slower and less flexible than having the full libselinux interface).