On Thu, 23 Sep 2004 04:33, "Alex Ackerman" <alex@xxxxxxxxxxxxx> wrote: > Does this mean the strict policy will not work on a Fedora Core system at > all or that it will take some customization prior to working effectively? > Also, are there plans to support te domains for either Sendmail or Postfix > via the SELinux policy in the near future? What about PostgreSQL/MySQL? The strict policy works well for reasonably default configurations. On all the machines I use seriously (IE not test machines) I run the strict policy. It's been working well for me for years. But using strict policy requires that you know how to write policy if you want to go too far from the defaults, if this is a problem for you then you want the targeted policy. We plan to continue slowly adding domains to the targeted policy. Sendmail, Postfix, PostgreSQL and MySQL are all good candidates for that. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page
