Hi friends,
I would like to invite you to join Confined Users test day which will be held tomorrow, 2009-10-20. Please come out to Freenode IRC #fedora-test-day or #fedora-selinux and help us improve SELinux policy. You will need a machine with updated Fedora 12 or rawhide (virtualized machines are welcomed too :-)). Testing is pretty straightforward: all requirements and test cases are described in details here[1].
SELinux Confined Users is a feature where SELinux role is assigned to each user and where the SELinux policy controls what the user can do/access on the system.
Dan Walsh and Miroslav Grepl will help us to solve issues.
Thanks to all who come along to help test!
Milos Malik
P.S.: There is no bravery in running Fedora/RHEL with disabled SELinux ;-)
On Mon, 2009-10-19 at 11:24 -0400, Milos Malik wrote:
Hi friends,
I would like to invite you to join Confined Users test day which will be held tomorrow, 2009-10-20. Please come out to Freenode IRC #fedora-test-day or #fedora-selinux and help us improve SELinux policy. You will need a machine with updated Fedora 12 or rawhide (virtualized machines are welcomed too :-)). Testing is pretty straightforward: all requirements and test cases are described in details here[1].
SELinux Confined Users is a feature where SELinux role is assigned to each user and where the SELinux policy controls what the user can do/access on the system.
Dan Walsh and Miroslav Grepl will help us to solve issues.
Thanks to all who come along to help test!
Milos Malik
P.S.: There is no bravery in running Fedora/RHEL with disabled SELinux ;-)
I like the challenge! :) Thanks for taking the time to plan and prepare this test day. I've made some minor wiki modifications to the test day page. Would it make sense to create individual test case pages for each of the listed test cases? We typically recommend using the template: https://fedoraproject.org/wiki/Template:QA/Test_Case
Thanks, James
On Mon, Oct 19, 2009 at 14:08:45 -0400, James Laska jlaska@redhat.com wrote:
I like the challenge! :) Thanks for taking the time to plan and prepare this test day. I've made some minor wiki modifications to the test day page. Would it make sense to create individual test case pages for each of the listed test cases? We typically recommend using the template: https://fedoraproject.org/wiki/Template:QA/Test_Case
I mentioned this to Dan a while back, but one thing I would find nice is a tool to reset your policy back to the default for (supposedly) installed policy. When things get stuffed up it's possible that you get to where you can't update the active policy. Switching to another policy (say minimal) and back is two full file relabels. I found that nuking the active policy in an unsupported manner and yum reinstalling the current policy relabels a much smaller number of files and seems to be a lot quicker. I don't know exactly what I did that caused problems, but the three machines I yum updated to f12 all had issues handling updates to the targeted policy. I do have local modules installed and some local fcontext rules, that may have been a factor in this. semanage is limited you can't change everything at once and the result of a single semanage run needs to be consistant and you can't always do that. I'll try to go through the test cases eventually, but it probably won't be tomorrow.