Bug#333834: marked as done (linux-2.6: Please enabled "audit" support, selinux is pretty much unuseable otherwise.)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Bug#333834: marked as done (linux-2.6: Please enabled "audit" support, selinux is pretty much unuseable otherwise.)

Debian Bug Tracking System
Your message dated Fri, 4 Nov 2005 19:57:00 -0800 (PST)
with message-id <Pine.LNX.4.63.0511041956050.3103@bobcat>
and subject line Bug#333834: Please enable "audit" support
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 13 Oct 2005 22:38:21 +0000
>From [hidden email] Thu Oct 13 15:38:21 2005
Return-path: <[hidden email]>
Received: from legolas.drinsama.de [62.91.17.164] (postfix)
        by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
        id 1EQBiP-0005A0-00; Thu, 13 Oct 2005 15:38:21 -0700
Received: from localhost (localhost [127.0.0.1])
        by localhost (Postfix) with ESMTP id 8A59DC4C090;
        Fri, 14 Oct 2005 00:38:20 +0200 (CEST)
Received: from legolas.drinsama.de ([127.0.0.1])
        by localhost (legolas [127.0.0.1]) (amavisd-new, port 10024)
        with SMTP id 12140-09; Fri, 14 Oct 2005 00:38:19 +0200 (CEST)
Received: from wintermute.xmldesign.de (p549A1B9E.dip0.t-ipconnect.de [84.154.27.158])
        by legolas.drinsama.de (Postfix) with ESMTP id BCC2AC4C083;
        Fri, 14 Oct 2005 00:38:19 +0200 (CEST)
Received: by wintermute.xmldesign.de (Postfix, from userid 1000)
        id 7ABD32348FC; Fri, 14 Oct 2005 00:37:51 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Erich Schubert <[hidden email]>
To: Debian Bug Tracking System <[hidden email]>
X-Debbugs-No-Ack: please
Subject: linux-2.6: Please enabled "audit" support,
 selinux is pretty much unuseable otherwise.
X-Mailer: reportbug 3.17
Date: Fri, 14 Oct 2005 00:37:51 +0200
Message-Id: <[hidden email]>
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at mucl.de
Delivered-To: [hidden email]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
        X_DEBBUGS_NO_ACK autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: linux-2.6
Severity: normal

While you can run SELinux just fine without audit enabled, it's next to
impossible to write or debug SELinux policy without it. But SELinux
hasn't reached the stage where there is a perfect policy for everything,
so users need to have the ability to debug their policy (or write new
for applications htere is no policy for yet)

Please enable audit in the debian kernels ASAP.

The kernels are unuseable for typical SELinux deployment otherwise.

Thank you.

---------------------------------------
Received: (at 333834-done) by bugs.debian.org; 5 Nov 2005 03:56:50 +0000
>From [hidden email] Fri Nov 04 19:56:50 2005
Return-path: <[hidden email]>
Received: from mouth.voxel.net (mail.squishy.cc) [69.9.180.118] (postfix)
        by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
        id 1EYFAg-0003st-00; Fri, 04 Nov 2005 19:56:50 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
        by mail.squishy.cc (Postfix) with ESMTP id 340EB5898007
        for <[hidden email]>; Fri,  4 Nov 2005 22:56:59 -0500 (EST)
Date: Fri, 4 Nov 2005 19:57:00 -0800 (PST)
From: Jurij Smakov <[hidden email]>
Reply-To: [hidden email]
To: [hidden email]
Subject: Re: Bug#333834: Please enable "audit" support
In-Reply-To: <[hidden email]>
Message-ID: <Pine.LNX.4.63.0511041956050.3103@bobcat>
References: <Pine.LNX.4.63.0511032142430.6454@bobcat>
 <[hidden email]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Delivered-To: [hidden email]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

Version: 2.6.14-2

On Sat, 5 Nov 2005, Erich Schubert wrote:

> Hi,
>> CONFIG_AUDIT=y
>> # CONFIG_AUDITSYSCALL is not set
>
> According to #selinux at Freenode this is just fine that way.
> Sorry, I wasn't sure which of them is needed for what.
>
> best regards,
> Erich Schubert

Thanks for feedback. I'm closing this bug.

Best regards,

Jurij Smakov                                        [hidden email]
Key: http://www.wooyd.org/pgpkey/                   KeyID: C99E03CC


--
To UNSUBSCRIBE, email to [hidden email]
with a subject of "unsubscribe". Trouble? Contact [hidden email]