The SELinux support within Gentoo Hardened is continuing to go forward. Anthony G. Basile has been working on the new SELinux Gentoo profiles which were in dire need of updates. With the rework, we'll also support the AMD64 no-multilib environment properly. With the new profiles we'll also make USE="open_perms" enabled by default. This will enable the "open" permission within the SELinux policies. And of course we'll remove that FEATURES="loadpolicy".

Not in git yet, but close, are further updates on the policy ebuilds. Revision 14 of our selinux-base-policy package will fail when the base policy couldn't be loaded properly. This will ensure that a successful installation means that the policies are loaded successfully as well. If we wouldn't do this, then users might assume that the policies are constantly being updated while in reality their system has always been working with older policies. I am also going to, based on the QA reports, update the sec-policy/* packages so they are not mentioned in those reports anymore.

In other related news, the Gentoo Hardened SELinux FAQ will get updates on UBAC, cron issues and a few errors (cosmetic or not) that you might have when working with Gentoo Hardened SELinux. I'm also constantly updating the Gentoo Hardened SELinux Handbook (PDF) with the latest information and developments.