[arch-general] Experiences with SELinux on Arch

[Jelle van der Waa]

On 01/22/16 at 05:26am, Niels Kobschaetzki wrote:
> On 16/01/22 10:14, Oon-Ee Ng wrote:
> >On Fri, Jan 22, 2016 at 4:59 AM, Niels Kobschaetzki
> ><niels at kobschaetzki.net> wrote:
> >>since I won't get an answer on the forum except "Read the Wiki" which
> >>isn't helpful, I ask here.
> >>Is here anybody with real world experiences with SELinux on Arch? The
> >>forum states the userland tools as "work in progress" which doesn't say
> >>anything about the progress…
> >>I'd like to know how easy SELinux is to use on Arch. I am just starting
> >>out to (re-)enabling it on my CentOS-servers and there it is actually
> >>not that hard after all nowadays because of the great tools available.
> >>But how about Arch?
> >
> >Have you read the wiki? Besides the actual content, the fact that
> >there is a page (and the activity ilevel ofthe page) should answer
> >your question pretty quickly.
> 
> Have you read my e-mail? Have you experiences with SELinux?

Simple answer is, our kernel does not support SELinux and won't in the
future. [1]

So you are basically on your own, build the kernel, core and tools from AUR.

You might want to look at Grsecurity though, since more people use it with
Arch and it has a package in [community]. [2]

[1] https://bugs.archlinux.org/task/31448
[2] https://wiki.archlinux.org/index.php/Grsecurity
> 
> Yes, of course I read the wiki and googled around for a couple of hours
> before I ask questions.
> 
> Niels

-- 
Jelle van der Waa
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20160122/0bbed718/attachment.asc>