Some time previously, it was mentioned that there was a snapshot of SELinux expected for 2.4.5. Also mentioned was that development on the initial SELinux branch had been essentially suspended, and that work was progressing on what (to me) sounded like an "SELinux II".
Is there any indication yet as to when the first development snapshot of this "next generation" of SELinux is likely to hit the website? I'm hesitent to try and do too much more with the current SELinux, if the core is likely to radically change any time soon.
Jonathan Day
--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
On Tue, 12 Jun 2001, Jonathan Day wrote:
>Some time previously, it was mentioned that there was a snapshot of
>SELinux expected for 2.4.5. Also mentioned was that development on the
>initial SELinux branch had been essentially suspended, and that work was
>progressing on what (to me) sounded like an "SELinux II".
Yes, this is essentially accurate. Linus gave some guidance on the kind of security framework he would be willing to consider for integration into the mainstream kernel. In its current form, SELinux doesn't correspond to that framework. We're working with the LSM effort (lsm.immunix.org) in the development of the new framework and we are developing a SELinux module for that framework. We did plan on continuing to upgrade the original SELinux prototype for newer versions of the Linux kernel, but it isn't clear how high a priority that should be.
>Is there any indication yet as to when the first development snapshot of
>this "next generation" of SELinux is likely to hit the website? I'm
>hesitent to try and do too much more with the current SELinux, if the
>core is likely to radically change any time soon.
That probably depends on how mature and useable you would want that snapshot to be. The LSM framework is still undergoing significant changes, and it is quite incomplete. However, I wouldn't let that discourage you from using SELinux today. The core functionality of SELinux isn't really changing.
-- Stephen D. Smalley, NAI Labs ssmalley@nai.com -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:53 EDT