Slackware

Slackware

[john.rh]

[-- Attachment #1: Type: text/plain, Size: 321 bytes --]

I'm pretty new to the list (as of last week), so forgive me if i'm being 
ignorant of topics already covered.

Has there been much success in using SELinux with the Slackware distribution?
Comments on using SELinux with Slackware are GREATLY appreciated!

-john
Free, encrypted, secure Web-based email at www.hushmail.com

Re: Slackware

[Jeffrey Denton]

On Tue, 26 Jun 2001 john.rh@hushmail.com wrote:

> Has there been much success in using SELinux with the Slackware distribution?
> Comments on using SELinux with Slackware are GREATLY appreciated!

It's on my long list of things I'd like to do.  But I know that doesn't help...
=-)

I haven't seen any discussion about getting SElinux to work with Slackware on
this list ( a grep through the mail folder only turned up your email ).  A query
on #slackware at openprojects.net didn't get a response. ( But that doesn't mean
anything. )

If anyone has ported SElinux to Slackware, they've kept it too themselves.
Considering that Slackware user's tend be independant and do-it-yourself types,
it wouldn't surprise me if someone has.

If you are interested in making the appropriate changes, I'd be willing to test
them.

Jeff


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: Slackware

[Ward, Robert D]

Good Morning,

I am running Slackware 7.0 with SE Linux on a home PC.  It seems to be
working fairly well, but I did have some difficulties on the installation as
described below.  If you have any specific questions I would be happy to
help.  Please bear in mind that my experience level is "enthusiastic
amateur", so I haven't really tried anything too challenging on the system.


I was working with Slackware 7.0 and the March 15th release of the SE Linux
source code.  These were the steps that I had to use to get the kernel to
compile on my system.

1.	 Link /usr/include/linux to /usr/src/slinux/kernel/include/linux

2.	 /usr/include/linux/errno.h should have a reference the following
include file in the headers :
#include </usr/src/linux/kernel/include/asm>

	3.  Create a link /usr/src/slinux/kernel/include/asm and point it to
./asm-i386
	
3.	run ./buld-kernel , and then ./install-kernel.  

After running the installation script for the kernel, I had to edit
lilo.conf manually.  For this I had to rely on earlier posts by Mr. Smalley
(Re: Can I compile NSA Linux 2.4.2 kernel the same way I do a the normal
2.4.2 kernel?, dated 3/30/01) and Mr. McCall (RE: Can I compile NSA Linux
2.4.2 kernel the same way I do a the norm	al 2.4.2 kernel?, dated
3/29/01).  

I still have problems getting the tools to install, but that should work for
the kernel.  When you do a uname -a after finishing, it should show the
FLASK kernel.  Hope this helps.



Respectfully,
Beau Ward

This email may contain Lockheed-Martin Management and Data Systems
confidential and privileged material for the sole use of the intended
recipient.  
Any review or distribution by others is strictly prohibited.  
If you are not the intended recipient please contact the sender and delete
all copies.



Management and Data Systems
(703) 293-4533
Robert.D.Ward@lmco.com <mailto:Robert.D.Ward@lmco.com> 


	-----Original Message-----
	From:	john.rh@hushmail.com [SMTP:john.rh@hushmail.com]
	Sent:	Tuesday, June 26, 2001 8:43 PM
	To:	SELinux@tycho.nsa.gov
	Subject:	Slackware

	I'm pretty new to the list (as of last week), so forgive me if i'm
being 
	ignorant of topics already covered.

	Has there been much success in using SELinux with the Slackware
distribution?
	Comments on using SELinux with Slackware are GREATLY appreciated!

	-john
	Free, encrypted, secure Web-based email at www.hushmail.com
	

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: Slackware

[Stephen Smalley]

On Wed, 27 Jun 2001, Ward, Robert D wrote:

> I am running Slackware 7.0 with SE Linux on a home PC.  It seems to be
> working fairly well, but I did have some difficulties on the installation as
> described below.  If you have any specific questions I would be happy to
> help.  Please bear in mind that my experience level is "enthusiastic
> amateur", so I haven't really tried anything too challenging on the system.

Are you running SELinux in enforcing mode?  Did you customize the
policy configuration for the Slackware environment?  The example policy
configuration and file_contexts configuration was based on RedHat,
so I would expect you to have to make a number of changes for other
distributions.

> I still have problems getting the tools to install, but that should work for
> the kernel.  When you do a uname -a after finishing, it should show the
> FLASK kernel.  Hope this helps.

Which tools/utilities caused problems for you?  Were you able to
install the modified login program and modified crond program?
Since Slackware may have its own patched versions of these programs,
you should be careful about blindly replacing the Slackware versions.
Those are the most important modified applications, since they
are needed in order to properly set the security contexts on
user processes and cron jobs.  The other modified applications
are less important, although useful.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Slackware

[john.rh]

[-- Attachment #1: Type: text/plain, Size: 488 bytes --]

At Wed, 27 Jun 2001 05:21:49 -0700 (MST), Jeffrey Denton <dentonj@c2i2.com> 
wrote:

>If you are interested in making the appropriate changes, I'd be willing 
to test them.

Firstly , thanks for the replies everyone. Secondly, I think I will try 
to put something together.. 

I'm wondering if the Slackware packaging system could handle something such 
as this.. hmm....

I'll keep the list up to date on my progress : )

-john
Free, encrypted, secure Web-based email at www.hushmail.com

SuSE

[Milos Rancic]

Did anyone work with SELinux & SuSE? The most important thing is how YaSE
works with SELinux.

Best
Milos


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SuSE

[Milos Rancic]

Sorry for replying... YaSE=YaST

Milos




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

LIDS & MAC on Linux

[Zachary Uram]

http://www.unixreview.com/articles/2001/0106/0106m/0106m.htm


uram@cmu.edu
"Blessed are those who have not seen and yet have faith." - John 20:29


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Slackware

[Stephen Smalley]

On Wed, 27 Jun 2001 cslater@wcnet.org wrote:

> I tried it on slackware. I also killed my box flat dead. SELinux as far as i 
> can tell requires PAM. PAM Kills slackware. Do not use PAM and slackware. I 
> tried. Gave errors when you tried to login, refused to let you login. I 
> reformated and reinstalled. Ive been talking to people cin the forum and they 
> say that they are not going to support PAM till it becomes more developed and 
> mature. They say that there are too many security problems at the moment, and 
> that it requires a entire rebuild of most of the a1 and possible n1 series. I 
> would generaly stay away from SELinux.

You should be able to work around this problem simply by disabling PAM
in the util-linux MCONFIG before building the modified login program.
SELinux itself doesn't depend on PAM, but the modified login program
provided in the SELinux distribution is configured with PAM enabled
by default, because we're using RedHat, and RedHat uses PAM.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Slackware

[cslater]

I tried it on slackware. I also killed my box flat dead. SELinux as far as i 
can tell requires PAM. PAM Kills slackware. Do not use PAM and slackware. I 
tried. Gave errors when you tried to login, refused to let you login. I 
reformated and reinstalled. Ive been talking to people cin the forum and they 
say that they are not going to support PAM till it becomes more developed and 
mature. They say that there are too many security problems at the moment, and 
that it requires a entire rebuild of most of the a1 and possible n1 series. I 
would generaly stay away from SELinux.


---------------------------------------------
This message was sent using Endymion MailMan.
http://www.endymion.com/products/mailman/



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.