From: Tom <tom@lemuria.org>
To: Russell Coker <russell@coker.com.au>
Cc: Stephen Smalley <sds@tislabs.com>, SELinux@tycho.nsa.gov
Subject: Re: db conflict ?
Date: Fri, 12 Apr 2002 16:17:29 +0200 [thread overview]
Message-ID: <20020412161729.B29624@lemuria.org> (raw)
In-Reply-To: <20020412135859.3D809281EF@lyta.coker.com.au>; from russell@coker.com.au on Fri, Apr 12, 2002 at 03:58:58PM +0200
It looks like I solved the problem, at least it now boots and appears
to run fine, except that I can't log in remotely, but ssh localhost
works. I'll inspect that later.
It appears the problem was mostly mine, possibly with a feature request
for better error handling/reporting.
My kernel was db version 7, the tools 8. The reason being that I did
update all packages, including the lsm kernel patch, but did not re-apply
it correctly. Or at least that's what I suspect. After cleaning the
kernel sources and starting from scratch, it worked fine.
So from what I have seen, it looks like all the Debian packages did
exactly what they should do, except that uninstalling the old flask
package did not clear out /etc/selinux, even though I uninstalled doing
purge (i.e. _ not - in dselect).
One thing that I noticed during this setup was that the patched login
and ssh tools do not appear to work if they run on a non-lsm kernel.
While this is probably the right thing to do security-wise, it also
means that keeping a non-SELinux kernel as "rescue system" on-disk
doesn't help a thing.
As said: Security-wise I understand this, but maybe there is a better
way, at least for development purposes?
I'll go and spank sshd now. :)
Thanks to everyone for the quick help and the work done.
--
http://web.lemuria.org/pubkey.html
pub 1024D/D88D35A6 2001-11-14 Tom Vogt <tom@lemuria.org>
Key fingerprint = 276B B7BB E4D8 FCCE DB8F F965 310B 811A D88D 35A6
--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2002-04-12 14:17 UTC|newest]
Thread overview: 53+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-04-12 10:23 db conflict ? Tom
2002-04-12 12:05 ` Russell Coker
2002-04-12 13:01 ` Tom
2002-04-12 14:07 ` Russell Coker
2002-04-12 14:40 ` Stephen Smalley
2002-04-12 15:15 ` Russell Coker
2002-04-12 19:03 ` [patch] " Stephen Smalley
2002-04-12 13:09 ` Stephen Smalley
2002-04-12 13:27 ` Russell Coker
2002-04-12 13:06 ` Stephen Smalley
2002-04-12 13:58 ` Russell Coker
2002-04-12 14:07 ` Stephen Smalley
2002-04-12 14:38 ` Russell Coker
2002-04-12 14:48 ` Stephen Smalley
2002-04-12 15:12 ` Russell Coker
2002-04-12 17:01 ` Howard Holm
2002-04-12 17:09 ` Russell Coker
2002-04-12 17:13 ` Stephen Smalley
2002-04-12 14:17 ` Tom [this message]
2002-04-12 14:21 ` Stephen Smalley
2002-04-12 14:34 ` Russell Coker
2002-04-12 14:50 ` Tom
2002-04-12 15:01 ` Tom
2002-04-12 15:11 ` Stephen Smalley
2002-04-12 15:15 ` Tom
2002-04-12 15:29 ` Tom
2002-04-12 16:35 ` Stephen Smalley
2002-04-12 16:50 ` Tom
2002-04-12 17:04 ` Stephen Smalley
2002-04-12 17:40 ` Tom
2002-04-12 17:49 ` Stephen Smalley
2002-04-12 16:33 ` Russell Coker
-- strict thread matches above, loose matches on Subject: below --
2002-04-12 17:26 Westerman, Mark
2002-04-12 17:29 ` Stephen Smalley
2002-04-12 17:37 Westerman, Mark
2002-04-12 18:03 ` Russell Coker
2002-04-12 19:17 ` Stephen Smalley
2002-04-12 20:11 ` Russell Coker
2002-04-12 20:25 ` Howard Holm
2002-04-12 21:01 ` Russell Coker
2002-04-15 14:44 ` Howard Holm
2002-04-12 20:18 ` Howard Holm
2002-04-15 16:08 ` Dale Amon
2002-04-18 14:54 ` Stephen Smalley
2002-04-18 15:42 ` Russell Coker
2002-04-19 20:20 ` Stephen Smalley
2002-04-12 17:45 Westerman, Mark
2002-04-12 18:12 ` Stephen Smalley
2002-04-12 18:13 Westerman, Mark
2002-04-12 19:42 ` Russell Coker
2002-04-12 20:33 Westerman, Mark
2002-04-15 14:40 ` Howard Holm
2002-04-15 15:16 Westerman, Mark
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20020412161729.B29624@lemuria.org \
--to=tom@lemuria.org \
--cc=SELinux@tycho.nsa.gov \
--cc=russell@coker.com.au \
--cc=sds@tislabs.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.