Gentoo SELinux LiveCD

Gentoo SELinux LiveCD

[Chris PeBenito]

[-- Attachment #1: Type: text/plain, Size: 1022 bytes --]

Announcing the Gentoo SELinux LiveCD

The Hardened Gentoo SELinux team has put out an experimental SELinux
LiveCD (108MB).  This is primarily meant for Gentoo users to install
SELinux from scratch, but also it can be used to try out SELinux.  I
have been able to successfully boot the CD in enforcing.  The main
requirement is at least a pentium pro machine, since it is compiled with
-march=i686.  Please keep in mind its experimental, and if you find bugs
please report them to me, or Gentoo bugzilla (bugs.gentoo.org).  The
only issue I know of is some denials with dhcpcd.


http://gentoo.oregonstate.edu/experimental/x86/livecd/gentoo-selinux-2004.0-i686-20040125.iso

MD5:

a4ae323152948633082f5ddf9272f677  gentoo-selinux-2004.0-i686-20040125.iso

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: Gentoo SELinux LiveCD

[Carsten Grohmann]

On Montag, 26. Januar 2004 20:34, Chris PeBenito wrote:
> Announcing the Gentoo SELinux LiveCD
>
> The Hardened Gentoo SELinux team has put out an experimental
> SELinux LiveCD (108MB).  This is primarily meant for Gentoo users
> to install SELinux from scratch, but also it can be used to try
> out SELinux.  I have been able to successfully boot the CD in
> enforcing.  The main requirement is at least a pentium pro
> machine, since it is compiled with -march=i686.  Please keep in
> mind its experimental, and if you find bugs please report them to
> me, or Gentoo bugzilla (bugs.gentoo.org).  The only issue I know
> of is some denials with dhcpcd.

The LiveCD is great - I try it yesterday and it runs fine. 

Do you use a small specific policy? Because I can't change the role 
of root to user_r.
What do you think about adding the policy sources and the command 
line version of the setools? With this the SELinux newbies could 
use your CD to make the first steps on SELinux.

Could it be, that the unmount of loopback filesystem failed? I get 
follow message:
Unmounting loopback filesystems...
Failed to unmount filesystems

I would show your LiveCD as an part of my SELinux workshop in March 
in Chemnitz (a town in saxony), if you don't object.

Greetings

Carsten



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Gentoo SELinux LiveCD

[Chris PeBenito]

[-- Attachment #1: Type: text/plain, Size: 1521 bytes --]

On Sat, 2004-01-31 at 10:25, Carsten Grohmann wrote:
> On Montag, 26. Januar 2004 20:34, Chris PeBenito wrote:
> > Announcing the Gentoo SELinux LiveCD

> The LiveCD is great - I try it yesterday and it runs fine. 
> 
> Do you use a small specific policy? Because I can't change the role 
> of root to user_r.

Well just like the NSA example policy, root is allowed staff_r and
sysadm_r, not user_r.

> What do you think about adding the policy sources and the command 
> line version of the setools? With this the SELinux newbies could 
> use your CD to make the first steps on SELinux.

Everything in /etc lives on the initrd so its modifiable.  I'd prefer to
keep the initrd slim, but I'll check into it.

> Could it be, that the unmount of loopback filesystem failed? I get 
> follow message:
> Unmounting loopback filesystems...
> Failed to unmount filesystems

I'll have to check that too; I fell into the habit of hitting the reset
button on the machine, rather than waiting for the livecd to shut down,
since it doesn't matter :)

> I would show your LiveCD as an part of my SELinux workshop in March 
> in Chemnitz (a town in saxony), if you don't object.

Certainly!  No objections.  We'll probably have a new revision by then.

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]