On Mon, 25 Jul 2011, Lamar Owen wrote: > The specific example of zoneminder is particularly > insidious. On our zoneminder systems, even point updates to > certain libraries has created problems. A good, modern, > package of zoneminder in a repo somewhere would save a lot > of grief in that particular case. > > And even having maintained packages before, I'm not sure I > would want to touch rolling my own zoneminder package(s). I've a full set for C5 on ZM 1.23 -- the SElinux blissful unawareness of that code is startling, as it is doing 'unsafe' operations all over the place. Running it on a dedicated appliance box and treating it as a vulnerable client to a SELinux enabled network using network sockets, is about the only way to run it safely 1.24 looks 'doable', although perhaps not without some C6 libraries -- I see it in rawhide, and in F, after F13, as I recall -- Russ herrold