SELinux workgroup: Difference between revisions
imported>Etbe No edit summary |
imported>Etbe No edit summary |
||
| Line 7: | Line 7: | ||
== Config == | == Config == | ||
boot.kernelParams = [ "security=selinux" ]; | boot.kernelParams = [ "security=selinux selinux=1" ]; | ||
# not yet tested the kernel config | # not yet tested the kernel config | ||
boot.kernelPatches = [ { | boot.kernelPatches = [ { | ||
| Line 19: | Line 19: | ||
''; | ''; | ||
} ]; | } ]; | ||
environment.systemPackages = with pkgs; [ policycoreutils ]; | |||
== Links == | == Links == | ||
Revision as of 10:48, 25 February 2019
This group is about adding SE Linux support to NixOS both booting and when run on a system like Debian or Fedora with SE Linux support.
People
Config
boot.kernelParams = [ "security=selinux selinux=1" ];
# not yet tested the kernel config
boot.kernelPatches = [ {
name = "selinux-config";
patch = null;
extraConfig =
SECURITY_SELINUX y
SECURITY_SELINUX_DEVELOP y
SECURITY_SELINUX_AVC_STATS y
SECURITY_SELINUX_CHECKREQPROT_VALUE 0
;
} ];
environment.systemPackages = with pkgs; [ policycoreutils ];
Links
- Proposed patch for subst file-contexts, this maps /nix/store/* directories to / for file labelling (both initial system labelling and dynamic labelling of new files).
- GitHub page for e-user's changes adding SE Linux support to NixOS.