On Thu, 2011-08-04 at 12:51 -0400, Chris Lalancette wrote:
On 08/04/11 - 12:36:02PM, Mo Morsi wrote:
> > One thing I don't see mentioned here which will be immensely important is
> > getting the whole system running end-to-end with SELinux. That is going to be
> > a requirement to get this into any sort of product, so we should add tasks for
> > it.
> >
>
> Didn't we define selinux policies for aeolus? What happend to those? Do
> they need updating?
I don't recall that, though it may be possible. I know of at least a couple
of problems still outstanding with imagefactory; I'm sure there are more, but
we need to identify and fix them.
IIRC, the only reason we cant have selinux enabled is because of an
issue or 2 in imagefactory, we almost did a release a couple months ago
with selinux enforcing, but had to back it out at the last instant, wish
I could recall the exact culprit (pretty easy to find again though, once
this is more easily installable anywhere but rawhide).
-j