A new release of the SELinux Reference Policy is now available on the Tresys OSS site, http://oss.tresys.com. In this release, core infrastructure for the X Windows userspace object manager (aka XSELinux or Security Enhanced X Windows) was added. This release focused on the structure of the X policy and thus is not complete (it won't run in enforcing). Inter-domain accesses, for example, copying from evolution and pasting to firefox, have not yet been added to the policy. The complete change log for this release follows at the end of the email. For people interested in helping develop the X policy, the xserver_object_manager tunable should be enabled, along with the object manager support in Xorg. * Wed Apr 02 2008 Chris PeBenito <selinux@xxxxxxxxxx> - 20080402 - Add core Security Enhanced X Windows support. - Fix winbind socket connection interface for default location of the sock_file. - Add wireshark module based on ethereal module. - Revise upstart support in init module to use a tunable, as upstart is now used in Fedora too. - Add iferror.m4 rather generate it out of the Makefiles. - Definitions for open permisson on file and similar objects from Eric Paris. - Apt updates for ptys and logs, from Martin Orr. - RPC update from Vaclav Ovsik. - Exim updates on Debian from Devin Carrawy. - Pam and samba updates from Stefan Schulze Frielinghaus. - Backup update on Debian from Vaclav Ovsik. - Cracklib update on Debian from Vaclav Ovsik. - Label /proc/kallsyms with system_map_t. - 64-bit capabilities from Stephen Smalley. - Labeled networking peer object class updates. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
