Dropping of selinux & the X subsystem

Dropping of selinux & the X subsystem

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 258 bytes --]

Hello Stefan,

I just wanted to know what the status is on dropping SELinux from the
distribution as well as X.

I have seen that you started working on the latter, and I know that we are
almost done with SELinux. But just asking to confirm.

Best,
-Michael

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Dropping of selinux & the X subsystem

[Stefan Schantl]

[-- Attachment #1: Type: text/plain, Size: 1223 bytes --]

Hello Michael,

The remove of SELinux is done, still the feature is enabled in the
kernel config, which is tracked by bug #11379 and assigned to Arne.

As you pointed in one of your mails to this list, there are still some
packages which are depend on SElinux in our repositories.

For compatibility reasons, we should keep the selinux libraries for a
while in the stable repository unless the build service is up again and
all modified packages have been build, tested and moved to the stable
repository...

In the meantime, I will work on removing the audit subsystem from our
distribution and then go on to remove X11.

The reason, why I have prior the remove of X11 support from cairo and
python3 was, that now an IPFire 3 basesystem and also the build
environment does not longer require any of the X11 libraries, which
saves us some space on the system and images and fasten to setup
the build environment a bit.

Best regards,

-Stefan
> Hello Stefan,
> 
> I just wanted to know what the status is on dropping SELinux from the
> distribution as well as X.
> 
> I have seen that you started working on the latter, and I know that
> we are
> almost done with SELinux. But just asking to confirm.
> 
> Best,
> -Michael

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

Re: Dropping of selinux & the X subsystem

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 1657 bytes --]

Hello,

this is good news.

On Thu, 2017-10-12 at 12:31 +0200, Stefan Schantl wrote:
> Hello Michael,
> 
> The remove of SELinux is done, still the feature is enabled in the
> kernel config, which is tracked by bug #11379 and assigned to Arne.

Please remind him to disable this with the next release.

> As you pointed in one of your mails to this list, there are still some
> packages which are depend on SElinux in our repositories.
> 
> For compatibility reasons, we should keep the selinux libraries for a
> while in the stable repository unless the build service is up again and
> all modified packages have been build, tested and moved to the stable
> repository...

Agreed.

> In the meantime, I will work on removing the audit subsystem from our
> distribution and then go on to remove X11.

Ok.

> The reason, why I have prior the remove of X11 support from cairo and
> python3 was, that now an IPFire 3 basesystem and also the build
> environment does not longer require any of the X11 libraries, which
> saves us some space on the system and images and fasten to setup
> the build environment a bit.

Indeed. Good idea. Please send patches. Ideally in patchsets of a good size and
not all individually to keep noise a bit down on the list.

Best,
-Michael

> 
> Best regards,
> 
> -Stefan
> > Hello Stefan,
> > 
> > I just wanted to know what the status is on dropping SELinux from the
> > distribution as well as X.
> > 
> > I have seen that you started working on the latter, and I know that
> > we are
> > almost done with SELinux. But just asking to confirm.
> > 
> > Best,
> > -Michael

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]