SELinux userspace release 2.6 and setools4
Summary
The new SELinux userspace 2.6 release and setools4 with several improvements and changes are available.
Owner
- Name: Petr Lautrbach
- Email: plautrba@redhat.com
- Name: Vít Mojžíš
- Email: vmojzis@redhat.com
- Release notes owner:
Current status
- Targeted release: Fedora 26
- Last updated: 2017-01-05
- Tracker bug: <will be assigned by the Wrangler>
Detailed Description
SELinux userspace release 2.6
SELinux userspace release 2.6 provides lot of fixes several improvements
- sepolicy was converted to use setools4. setools3 is no longer being developed. setools will be updated to setools4 together with this change.
- genhomedircon enhancements
- supports generating home directory contexts for login mappings using the %group syntax
- new templates %{USERID} and %{USERNAME} were added
SETools 4.0.1
SETools has been reimplemented in Python. The following tools were reimplemented:
- apol
- sediff
- seinfo
- sesearch
The following tools were added:
- sedta (command line domain transition analysis)
- seinfoflow (command line information flow analysis)
For an overview of the user interface changes since SETools 3.x, see the related wiki page https://github.com/TresysTechnology/setools/wiki/Changes-Since-SETools-v3
Benefit to Fedora
It's always beneficial to have latest software in Fedora.
Scope
- Proposal owners:
- Other developers: N/A (not a System Wide Change)
- Release engineering: N/A (not a System Wide Change)
- List of deliverables: N/A (not a System Wide Change)
- Policies and guidelines: N/A (not a System Wide Change)
- Trademark approval: N/A (not needed for this Change)
Upgrade/compatibility impact
N/A (not a System Wide Change)
How To Test
N/A (not a System Wide Change)
User Experience
N/A (not a System Wide Change)
Dependencies
N/A (not a System Wide Change)
Contingency Plan
- Contingency mechanism: (What to do? Who will do it?) N/A (not a System Wide Change)
- Contingency deadline: N/A (not a System Wide Change)
- Blocks release? N/A (not a System Wide Change), Yes/No
- Blocks product? product
Documentation
N/A (not a System Wide Change)