Hunting fuser
by Sven Vermeulen, post on Mon 12 March 2012I am able to work on Gentoo and SELinux about one hour per day. It's more in total time, but being a bit exhausted makes me act a bit more slowly which boils down to about one hour per day. And one hour per day isn't bad, you're able to …
Introducing 2.20120215 policies
by Sven Vermeulen, post on Sun 26 February 2012A few weeks after being released, we now have the 20120215-based policies available for our users (and also the newer userspace utilities). The packages currently reside in the hardened-dev overlay as they will need to see sufficient testing before we merge those to the main tree. For most users, nothing …
This months' stabilization done, more to come
by Sven Vermeulen, post on Sun 29 January 2012A small notification to tell you that the SELinux policies that were pushed to the main tree 30 days (or more) ago have now been stabilized (none of them introduced problems, although some of them have other bugs still open which are either fixed in \~arch or will be fixed …
Gentoo WiKi & Knowledge Base
by Sven Vermeulen, post on Mon 26 December 2011I have been playing with the Gentoo Wiki the last few days and am very impressed with the work that both the wiki teams as well as existing contributors have already done to the place. The look and feel is very slick and editing works just as expected. One of …
Supporting fix scripts for XCCDF content and maintaining the documents
by Sven Vermeulen, post on Fri 23 December 2011One of the features supported through OVAL (and Open-SCAP) is to generate fix scripts when a test has failed. The administrator can then verify this script (of course) and then execute it to correct wrong settings. So I decided to play around with this as well and enhanced the Gentoo …
SELinux Gentoo/Hardened state 2011-12-19
by Sven Vermeulen, post on Mon 19 December 2011On december 14th, the Gentoo Hardened project had its monthly online meeting to discuss the current state of affairs of its projects and subprojects. Amongst them, the updates on the SELinux-front were presented as well.
Since last meeting, the follow topics passed the revue.
- sec-policy/selinux-base-policy, which is the "master …
Supporting CC-BY-SA 3.0
by Sven Vermeulen, post on Tue 29 November 2011Until now, documents on the Gentoo website all had to be licensed under the Creative Commons Attribution/Share Alike license, version 2.5. Why? Because at the time of the license choice, that was probably the latest version at hand. In the XML code itself, the license tagging was done …
SELinux Gentoo/Hardened state 2011-11-17
by Sven Vermeulen, post on Thu 17 November 2011A small write-down on the Gentoo Hardened SELinux state-of-affairs, largely triggered because there was an online meeting for the Gentoo Hardened project today.
- The SELinux policies offered in the
sec-policycategory are based on the latest refpolicy release. The older policies have been removed from the Portage tree. The patches …
Gentoo Security Benchmark with OVAL and Open-SCAP
by Sven Vermeulen, post on Wed 16 November 2011A while ago, I got referred to the Open Vulnerability and Assessment Language, which seems to be an open specification (or even standard) for defining security content/information and being able to document such things in a way that tools can interpret it. Actually, it is a set of these …
SELinux' 2011/07 releases now stable
by Sven Vermeulen, post on Sun 23 October 2011A few minutes ago, I stabilized both the 2.20110726 policies as well as the SELinux userspace utilities that were stable (upstream) on 20110727. With the change, I also updated the Gentoo SELinux Handbook with the changes I presented on our gentoo-hardened mailinglist. After some time, I'll remove the now …