Re: Questions

On 2 Oct 2001, Justin R. Smith wrote:

> I am considering installing SELinux on my system and have a few
> questions:
>
> 1. Is extensive reconfiguration required whenever one adds new software
> to ones machine?

That depends on the software and your security objectives. For example, if the software package includes a program that must run with privilege, then you will likely need to add a domain for the program or at least put the program into an existing domain for similar programs. If you want to limit your software to least privilege, then you will naturally need to define a domain and types for it.

> 2. Has anyone run SELinux with Tomcat and JSP and servlets?

We have not tried this. I would expect that you would want to define a domain and types for the Tomcat server, as has been done for apache by MITRE.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.