Re: CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
- To: cgzones <cgzones@googlemail.com>
- Cc: selinux-devel@lists.alioth.debian.org, Russell Coker <russell@coker.com.au>, Debian Kernel Team <debian-kernel@lists.debian.org>
- Subject: Re: CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE
- From: Laurent Bigonville <bigon@debian.org>
- Date: Sun, 2 Apr 2017 14:35:20 +0200
- Message-id: <[🔎] cfbb6317-2004-f1b6-0152-683e38412a7a@debian.org>
- In-reply-to: <CAJ2a_DcoJFi=P8yONhGDaV0wjqY08pS9Kpq6UAvw=zV6awfM8w@mail.gmail.com>
- References: <CAJ2a_Dc0JEs9mgVtrrbCwLLrp4Hipa+MUg7kngmN8mnC2zncvA@mail.gmail.com> <CAJ2a_DfjU1ZHkxNzbyv9XKBOMm-cTnT8Jmka46ABp_yyatHLOg@mail.gmail.com> <CAJ2a_Dc5mOMheytxLks6_CJAnRm4oToVaL9GjFcSkLuN_md1hw@mail.gmail.com> <CAJ2a_Ddw_r+2zv0+SvjwssosQHYJuTEMaX3d+1j2jndePLHkVQ@mail.gmail.com> <CAJ2a_Dcf_S=pCksuU1K_VNw4gbBdkSNhTXT_WhZotqZ19XFGVA@mail.gmail.com> <CAJ2a_De3xrpWaxEA=oxDdLRV8FHQqDx4Vq54vnKWDMpVUGVgUQ@mail.gmail.com> <CAJ2a_DfsiSO3NW4dYkj-thO9NA48zEE7hZ72kJ3tS7Q0+eUCmw@mail.gmail.com> <CAJ2a_DcoJFi=P8yONhGDaV0wjqY08pS9Kpq6UAvw=zV6awfM8w@mail.gmail.com>
Le 02/04/17 à 03:25, cgzones a écrit :
Is there any reason why the standard Debian kernel sets the value for
checkreqprot to 1, while the default[1] is 0?
RedHat[2] seems also to use 0 and from the documentation 0 seems to be
the stricter setting.
To be honest I've no idea and the RH bug seems to miss some messages and
refers to other private bug(s) but I can confirm that on centos 7.3 the
value is set to 0.
The kernel configuration is done by the kernel team, I'm forwarding your
question to them on their ML. Maybe they didn't saw the default value
has changed?
Dear kernel maintainer, do you have an idea about this?
Kind regards,
[1]
https://github.com/torvalds/linux/commit/2a35d196c160e352fa56eabb7952f78f4c85f577
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1264977
Reply to: