New packages...

New packages...

[Alex deVries]

I've uploaded about 40 new binary RPMs that are scheduled to be included
in the Alpah 2 release of RH 5.1 that I hope to release tomorrow... if
anyone wants to get ahead, they're in:

ftp://ftp.linux.sgi.com/pub/redhat/devel/

There's also the patched source RPMs there, with diffs.  The full file
listing is below the .sig.

Also, to index the current release, the packages are nicely indexed at
http://www.linux.sgi.com/manhattan/rpm2html/ .


- Alex

-- 
Alex deVries, puffin on LinuxNet.
http://www.engsoc.carleton.ca/~adevries/ .

-rw-rw-r--    1 root     sys          111 Jun 20 11:14 README

RPMS:
total 16
drwxrwxr-x    2 root     sys         4096 Jun 20 11:09 RPMS
drwxrwxr-x    2 root     sys         4096 Jun 20 11:09 SRPMS

RPMS/RPMS:
total 99352
-rw-rw-r--    1 root     sys       273191 Jun 20 10:54 dhcp-2.0b1pl1-2.mipseb.rpm
-rw-rw-r--    1 root     sys        99507 Jun 20 10:54 findutils-4.1-24.mipseb.rpm
-rw-rw-r--    1 root     sys      3752159 Jun 20 10:55 gimp-0.99.28-10.mipseb.rpm
-rw-rw-r--    1 root     sys      4756167 Jun 20 10:56 gimp-data-extras-0.99a-9.noarch.rpm
-rw-rw-r--    1 root     sys        99237 Jun 20 10:56 gimp-devel-0.99.28-10.mipseb.rpm
-rw-rw-r--    1 root     sys        92302 Jun 20 10:56 gimp-libgimp-0.99.28-10.mipseb.rpm
-rw-rw-r--    1 root     sys       191572 Jun 20 10:56 gnome-core-0.13-9.mipseb.rpm
-rw-rw-r--    1 root     sys       418336 Jun 20 10:56 gnome-graphics-0.13-9.mipseb.rpm
-rw-rw-r--    1 root     sys       592446 Jun 20 10:56 gnome-libs-0.13-9.mipseb.rpm
-rw-rw-r--    1 root     sys       625321 Jun 20 10:56 gnome-libs-devel-0.13-9.mipseb.rpm
-rw-rw-r--    1 root     sys        26918 Jun 20 10:56 gnome-linuxconf-0.13-16rh.mipseb.rpm
-rw-rw-r--    1 root     sys       368941 Jun 20 10:56 imlib-1.4-10.mipseb.rpm
-rw-rw-r--    1 root     sys       216878 Jun 20 10:56 imlib-devel-1.4-10.mipseb.rpm
-rw-rw-r--    1 root     sys        34965 Jun 20 10:57 inews-1.7.2-9.mipseb.rpm
-rw-rw-r--    1 root     sys      1160411 Jun 20 10:57 inn-1.7.2-9.mipseb.rpm
-rw-rw-r--    1 root     sys        61941 Jun 20 10:57 inn-devel-1.7.2-9.mipseb.rpm
-rw-rw-r--    1 root     sys       764325 Jun 20 10:57 kernel-2.1.99-0.1.mipseb.rpm
-rw-rw-r--    1 root     sys       717744 Jun 20 10:57 kernel-headers-2.1.99-0.1.mipseb.rpm
-rw-rw-r--    1 root     sys      12855465 Jun 20 10:59 kernel-source-2.1.99-0.1.mipseb.rpm
-rw-rw-r--    1 root     sys        18131 Jun 20 10:59 kernelcfg-0.5-2.mipseb.rpm
-rw-rw-r--    1 root     sys        53569 Jun 20 10:59 mailx-8.1.1-1.mipseb.rpm
-rw-rw-r--    1 root     sys        34649 Jun 20 10:59 man-1.5d-3.mipseb.rpm
-rw-rw-r--    1 root     sys       183710 Jun 20 10:59 multimedia-2.1-10.mipseb.rpm
-rw-rw-r--    1 root     sys        52625 Jun 20 10:59 patch-2.5-4.mipseb.rpm
-rw-rw-r--    1 root     sys        51717 Jun 20 10:59 sysklogd-1.3-23.mipseb.rpm
-rw-rw-r--    1 root     sys      8592103 Jun 20 11:02 tetex-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys       169345 Jun 20 11:02 tetex-afm-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys       164895 Jun 20 11:02 tetex-dvilj-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys       240168 Jun 20 11:02 tetex-dvips-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys      2785344 Jun 20 11:03 tetex-latex-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys      5139177 Jun 20 11:03 tetex-texmf-src-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys        87434 Jun 20 11:04 tetex-xdvi-0.4pl8-11.mipseb.rpm
-rw-rw-r--    1 root     sys         8098 Jun 20 11:04 tmpwatch-1.5.1-2.mipseb.rpm
-rw-rw-r--    1 root     sys       192444 Jun 20 11:04 usermode-1.4.1-2.mipseb.rpm
-rw-rw-r--    1 root     sys        17902 Jun 20 11:04 usernet-1.0.7-2.mipseb.rpm
-rw-rw-r--    1 root     sys       950688 Jun 20 11:04 uucp-1.06.1-16.mipseb.rpm
-rw-rw-r--    1 root     sys       503897 Jun 20 11:04 xntp3-5.93-3.mipseb.rpm
-rw-rw-r--    1 root     sys      4337442 Jun 20 11:05 xscreensaver-2.16-4.mipseb.rpm
-rw-rw-r--    1 root     sys        90527 Jun 20 11:05 xterm-color-1.1-7.mipseb.rpm

RPMS/SRPMS:
total 9168
-rw-rw-r--    1 root     sys         2996 Jun 20 11:06 anonftp-2.5-2.src.rpm
-rw-rw-r--    1 root     sys        62418 Jun 20 11:06 autofs-3.1.1-5.src.rpm
-rw-rw-r--    1 root     sys        18496 Jun 20 11:06 eject-1.5-3.src.rpm
-rw-rw-r--    1 root     sys      1061164 Jun 20 11:07 elm-2.4.25-12.src.rpm
-rw-rw-r--    1 root     sys       253559 Jun 20 11:07 faces-1.6.1-10.src.rpm
-rw-rw-r--    1 root     sys       254316 Jun 20 11:07 faces-1.6.1-11.src.rpm
-rw-rw-r--    1 root     sys        53863 Jun 20 11:07 ncompress-4.2.4-11.src.rpm
-rw-rw-r--    1 root     sys       366530 Jun 20 11:07 pam-0.64-2.src.rpm
-rw-rw-r--    1 root     sys        98430 Jun 20 11:07 sysklogd-1.3-23.src.rpm
-rw-rw-r--    1 root     sys       537915 Jun 20 11:07 util-linux-2.7-19.src.rpm
-rw-rw-r--    1 root     sys      1957040 Jun 20 11:07 xntp3-5.93-3.src.rpm

SRPMS:
total 0

patches:
total 40
-rw-rw-r--    1 root     sys         1091 Jun 20 11:06 anonftp.diff
-rw-rw-r--    1 root     sys          869 Jun 20 11:06 autofs.diff
-rw-rw-r--    1 root     sys         1092 Jun 20 11:06 eject.diff
-rw-rw-r--    1 root     sys         1095 Jun 20 11:07 ncompress.diff
-rw-rw-r--    1 root     sys          747 Jun 20 11:07 xpilot.spec.diff

new packages

[Russell Coker]

I've uploaded new packages to Debian for the latest SE Linux base code and 
default policy.  I've also uploaded a new kernel-patch package for the latest 
2.4.18 LSM patch that is on the NSA site.  NB This version of the kernel 
patch is needed for the latest utils and policy!

Also I've put a copy of the latest OpenSSH with my latest patch (including 
xauth support) on my site.


Have fun!

-- 
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: new packages

[Ed Street]

Hello,

Where is the kernel patch located at?

Ed

-----Original Message-----
From: owner-selinux@tycho.nsa.gov [mailto:owner-selinux@tycho.nsa.gov]
On Behalf Of Russell Coker
Sent: Saturday, July 06, 2002 5:55 PM
To: SE Linux
Subject: new packages

I've uploaded new packages to Debian for the latest SE Linux base code
and 
default policy.  I've also uploaded a new kernel-patch package for the
latest 
2.4.18 LSM patch that is on the NSA site.  NB This version of the kernel

patch is needed for the latest utils and policy!

Also I've put a copy of the latest OpenSSH with my latest patch
(including 
xauth support) on my site.


Have fun!

-- 
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.

--
You have received this message because you are subscribed to the selinux
list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
the words "unsubscribe selinux" without quotes as the message.


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: new packages

[Ed Street]

Hello,

Some quick notes on the new updates I found.

1) kernel patch file had a blurb on one file, stated already applied.
(will get the section and past it)

2) fingerd.te gave me fits. Had to remote the file
/usr/share/Selinux/policy/current/domains/program/fingerd.te (not
running fingerd on this box)

3) using apt-get while in enforcement mode gives some interesting
errors.

This is directly logged in as root, NO su involved.  Tested on the
console and by ssh with the same results.

debian:~# id
uid=0(root) gid=0(root) groups=0(root) context=root:sysadm_r:sysadm_t
sid=181

debian:~# apt-get remove tiger
Reading Package Lists... Done
Building Dependency Tree... Done
The following packages will be REMOVED:
  tiger
0 packages upgraded, 0 newly installed, 1 to remove and 0  not upgraded.
1 packages not fully installed or removed.
Need to get 0B of archives. After unpacking 1184kB will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 7904 files and directories currently installed.)
Removing tiger ...
dpkg (subprocess): unable to execute pre-removal script: Permission
denied
dpkg: error processing tiger (--remove):
 subprocess pre-removal script returned error exit status 2
dpkg (subprocess): unable to execute post-installation script:
Permission denied
dpkg: error while cleaning up:
 subprocess post-installation script returned error exit status 2
Errors were encountered while processing:
 tiger
E: Sub-process /usr/bin/dpkg returned an error code (1)
debian:~#


Ed



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: new packages

[Russell Coker]

On Sat, 6 Jul 2002 22:39, Ed Street wrote:
> Where is the kernel patch located at?

It's in Debian/unstable, but I've also put it on 
http://www.coker.com.au/selinux/kern/

-- 
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: new packages

[Russell Coker]

On Sun, 7 Jul 2002 04:35, Ed Street wrote:
> Some quick notes on the new updates I found.
>
> 1) kernel patch file had a blurb on one file, stated already applied.
> (will get the section and past it)

Are you applying it over the Debian kernel-patch package?  If so try getting 
the source from ftp.kernel.org.

> 2) fingerd.te gave me fits. Had to remote the file
> /usr/share/Selinux/policy/current/domains/program/fingerd.te (not
> running fingerd on this box)

What exactly was the problem?  Anyway that's not finished yet...

> 3) using apt-get while in enforcement mode gives some interesting
> errors.

Use se_apt-get, se_dpkg, and se_dselect instead of the usual programs.

-- 
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: new packages

[Ed Street]

Hello,

Yes I'm applying it over the debian kernel. apt-get install
kernel-source-2.4.18.  So far this kernel patch seems much improved over
the previous patches :)


Fingerd issues:

debian:/usr/src/selinux# dpkg -i
selinux-policy-default_2002070313-1_all.deb
Selecting previously deselected package selinux-policy-default.
(Reading database ... 9873 files and directories currently installed.)
Unpacking selinux-policy-default (from
selinux-policy-default_20020703131_all.deb) ...

Setting up selinux-policy-default (2002070313-1) ...

Copying the sample /usr/share/selinux/policy/current directory from
/usr/share/selinux/policy/default

Would you like to run
'make -C /usr/share/selinux/policy/current relabel' to assign SIDs
to all files on the system now [Y/n]?

make: Entering directory `/usr/share/selinux/policy/current'

make: *** No rule to make target `file_contexts/program/fingerd.fc',
needed by `file_contexts/file_contexts'.  Stop.

make: Leaving directory `/usr/share/selinux/policy/current'

dpkg: error processing selinux-policy-default (--install):
 subprocess post-installation script returned error exit status 2
Errors were encountered while processing:
 selinux-policy-default


Even with fingerd and finger installed I get the above messages.  Simply
deleting the fingerd.te file will allow a normal compile

Ed

-----Original Message-----
From: Russell Coker [mailto:russell@coker.com.au] 
Sent: Sunday, July 07, 2002 4:48 PM
To: blacknet@simplyaquatics.com; 'SE Linux'
Subject: Re: new packages

On Sun, 7 Jul 2002 04:35, Ed Street wrote:
> Some quick notes on the new updates I found.
>
> 1) kernel patch file had a blurb on one file, stated already applied.
> (will get the section and past it)

Are you applying it over the Debian kernel-patch package?  If so try
getting 
the source from ftp.kernel.org.

> 2) fingerd.te gave me fits. Had to remote the file
> /usr/share/Selinux/policy/current/domains/program/fingerd.te (not
> running fingerd on this box)

What exactly was the problem?  Anyway that's not finished yet...

> 3) using apt-get while in enforcement mode gives some interesting
> errors.

Use se_apt-get, se_dpkg, and se_dselect instead of the usual programs.




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: fingerd (was new packages)

[Ed Street]

Hello,

If I make a
/usr/share/selinux/policy/current/file_contexts/program/fingerd.fc file
shouldn't the contents be this?

/usr/sbin/in.fingerd               system_u:object_r:fingerd_exec_t

Ed


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: fingerd (was new packages)

[Russell Coker]

On Sun, 7 Jul 2002 17:23, you wrote:
> If I make a
> /usr/share/selinux/policy/current/file_contexts/program/fingerd.fc file
> shouldn't the contents be this?
>
> /usr/sbin/in.fingerd               system_u:object_r:fingerd_exec_t

Yes, that should be OK.

-- 
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
>From field.

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

new packages

[Russell Coker]

I have put new versions online of my 2.4 kernel patch package and the 
selinux-small packages with the changes discussed.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.