Re: RH 7.3 and NSA Secure Linux

[Justin Smith <jsmith@mcs.drexel.edu>]

On Tue, 2002-06-04 at 17:08, Dave Nuttall wrote:
> Hello,
> I've got a RH 7.3 system that I'm considering as the target for the NSA
> Secure Linux.
> However, the stable version points to utils that are clearly RH 7.2 vintage.
> 
> Would you mind sharing what you did to be able to use 7.3?
> Looks like grabbing the SRPMS, pulling the applicable source and modifying
> some Makefile references is the minimum that would be required.
> 
> My installation is a reduced "Server" install of 7.3.  Does that vary with
> your starting point?
> 
> Thanks for your consideration.
> 
> Dave Nuttall
> San Antonio, TX

I just installed the latest stable version of tarball form of NSA 
SELinux. (I dont' trust the NSA RPMS to install correctly). Apparently,
the 7.2 versions of the crucial utilities do not differ appreciably from
the 7.3 versions.

Several other points:

I originally thought that SELinux crashed on reboot, but it turned out
to be a defect in my installation of RH7.3.

Upgrading from 7.2 to 7.3 is harder than most RH upgrades --- the
standard upgrade process failed for me and I had to do a complete
install. But one must be sure to reformat ALL system directories
(particularly /var) since the process of rebooting the system seems to
have changed in a very significant way from 7.2 to 7.3.

In addition, 7.3 doesn't initialize USB devices automatically. One must
add the lines 

alias usb-controller uhci
alias usbcore uhci
post-install uhci modprobe printer
post-install printer modprobe joydev
post-install joydev modprobe hid

by hand to /etc/modules.conf

After this, everything seems to work OK.
--


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.