From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1SQOoH-0000is-Km for garchives@archives.gentoo.org; Fri, 04 May 2012 20:09:01 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 92E98E0683; Fri, 4 May 2012 20:08:52 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 550B6E0683 for ; Fri, 4 May 2012 20:08:52 +0000 (UTC) Received: from hornbill.gentoo.org (hornbill.gentoo.org [94.100.119.163]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 8645D1B4026 for ; Fri, 4 May 2012 20:08:51 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by hornbill.gentoo.org (Postfix) with ESMTP id 4E63EE5403 for ; Fri, 4 May 2012 20:08:50 +0000 (UTC) From: "Sven Vermeulen" To: gentoo-commits@lists.gentoo.org Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sven Vermeulen" Message-ID: <1336162096.3d9e6555032882cc363721a8c7c91da1f096fe0a.SwifT@gentoo> Subject: [gentoo-commits] proj/hardened-docs:master commit in: xml/, xml/selinux/ X-VCS-Repository: proj/hardened-docs X-VCS-Files: xml/selinux-faq.xml xml/selinux/hb-using-install.xml X-VCS-Directories: xml/ xml/selinux/ X-VCS-Committer: SwifT X-VCS-Committer-Name: Sven Vermeulen X-VCS-Revision: 3d9e6555032882cc363721a8c7c91da1f096fe0a X-VCS-Branch: master Date: Fri, 4 May 2012 20:08:50 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: 5610616a-a3c0-4470-a257-7377aa569703 X-Archives-Hash: 659cc1dc0677f6bcc1e71030fc644b80 commit: 3d9e6555032882cc363721a8c7c91da1f096fe0a Author: Sven Vermeulen siphos be> AuthorDate: Fri May 4 20:08:16 2012 +0000 Commit: Sven Vermeulen siphos be> CommitDate: Fri May 4 20:08:16 2012 +0000 URL: http://git.overlays.gentoo.org/gitweb/?p=3Dproj/hardened-docs= .git;a=3Dcommit;h=3D3d9e6555 Adding blurb on selinuxfs and /selinux versus /sys/fs/selinux --- xml/selinux-faq.xml | 31 +++++++++++++++++++++++++++++-- xml/selinux/hb-using-install.xml | 13 +++++++++++-- 2 files changed, 40 insertions(+), 4 deletions(-) diff --git a/xml/selinux-faq.xml b/xml/selinux-faq.xml index 965adca..5bb32b8 100644 --- a/xml/selinux-faq.xml +++ b/xml/selinux-faq.xml @@ -17,8 +17,8 @@ The FAQ is a collection of solutions found on IRC, mail= inglist, forums or elsewhere =20 -21 -2012-04-05 +22 +2012-05-05 =20 Questions @@ -892,5 +892,32 @@ logon manager). =20 +
+What is SELinuxfs and where should it be? + + +

+The selinuxfs is, as the name suggest, the SELinux File System. It is a +pseudo-filesystem, which means that it is represented through files and +directories, but those files or directories are not on your disk, but ge= nerated +by the Linux kernel every time you query it. +

+ +

+The file system is used by the SELinux utilities as an interface to quer= y the +SELinux state, maintained by the Linux kernel.=20 +

+ +

+Historically (before libselinux-2.1.9), the mount point for= the +SELinux file system had to be /selinux. From +libselinux-2.1.9 onwards, the default location where the fi= le +system is looked for is /sys/fs/selinux, although the libra= ry still +falls back to the original /selinux location if it cannot f= ind it +at the new place. +

+ + +
diff --git a/xml/selinux/hb-using-install.xml b/xml/selinux/hb-using-inst= all.xml index 037877e..85b2551 100644 --- a/xml/selinux/hb-using-install.xml +++ b/xml/selinux/hb-using-install.xml @@ -7,8 +7,8 @@ =20 -21 -2012-04-29 +22 +2012-05-05 =20
Installing Gentoo (Hardened) @@ -296,6 +296,15 @@ tools or configurations that apply. =20 +

+Previously (before sys-libs/libselinux-2.1.9 was stabilized= ) the +location of the SELinux file system was /selinux. This loca= tion can +still be used (the recent libselinux implementations are currently backw= ards +compatible with it) but we recommend to use the new location when you ca= n - and +if this is your first installation, better to go with the latest one +immediately ;-) +

+