[PATCH] [bugfix] Updated selinux_bootloader_notdisabled per ticket 391

Maura Dailey maura at eclipse.ncsc.mil
Tue Sep 3 16:06:48 UTC 2013


On 09/02/2013 10:42 PM, Jeffrey Blank wrote:
> Looks like a great improvement to me, please push.  At some point in
> the future, it seems we'll have to adjust for EFI systems, which (as
> Maura has noted elsewhere, right?) seem (rather obnoxiously) to not
> use a file linked from /etc/grub.conf.
Actually, /etc/grub.conf appears to always point to the correct 
location. The problem is that you can't use a symlink for file 
permission checks. File content checks are fine.

- Maura Dailey
>
> On Sun, Sep 1, 2013 at 11:24 AM, Shawn Wells <shawn.d.wells at gmail.com> wrote:
>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



More information about the scap-security-guide mailing list