SELinux: What's the Ubuntu trick?

[Magnus Runesson]

On Wed, 2006-05-31 at 19:06 +0800, Michael T. Richter wrote:
> OK, I've downloaded and installed all the SELinux-related packages
> (except for the one that wants to uninstall most of Ubuntu).  I've got
> all the binaries on my system.  Now I want to use them.  I'm told
> "SELinux is disabled".
> 
> The docs... aren't transparent.  (And they assume a standard root
> setup to boot.)  The only Wiki mention of SELinux mentions a project
> to bring SELinux into Ubuntu.  Is there a set of 5C (Clear, Concise,
> Courteous, Correct, Complete) documents explaining how to use SELinux
> under Ubuntu?  Or am I going to have to switch to CentOS for this
> project?

As far as I am aware of SELinux is not fully implemented in Ubuntu,
there are some only fragments. 

The rest of this answer may not be the answer you want but any way. 

I have earlier tried to learn SELinux on Fedora but gave up since it was
too complex to be usable in an ordinary computer environment. It is too
hard to change for a normal system administrator or software developer.
For instance if SELinux is turned on with defaults in RedHat Linux
Enterprise WS 4 YP and NIS are not working.

When Novell released Apparmor, I decided to give it a try. I am fully
aware that a lot of things are in a Computer Science perspective better
in SELinux, but I found Apparmor much more usable in a practical
environment. I have therefore done some proof of concept packaging for
Ubuntu Dapper. If these packages fit your need your are more than
welcome to test them.

A draft of a specification, with more information, can be found at
https://wiki.ubuntu.com/AppArmor
The packages can be found at http://www.linuxalert.org/ubuntu/apparmor/.


Best Regards
/Magnus Runesson

-- 
Magnus Runesson <mr-ubuntu at linuxalert.org>
Linuxalert