Re: SE Linux on Debian

[Tracy R Reed <treed@ultraviolet.org>]

[-- Attachment #1: Type: text/plain, Size: 1724 bytes --]

On Wed, Oct 02, 2002 at 02:01:46AM +0200, Russell Coker spake thusly:
> Yes, but you can get my packages for unstable from:
> deb http://www.coker.com.au/selinux/ ./

Ok, I'll do this just to keep things consistant.

> > But the new ps, ls, sshd, etc. do not seem to be included here. Where do I
> > get those? Are they not in a deb?
> 
> They are in coreutils, fileutils, shellutils, textutils, cron, dpkg, ssh, 
> login, logrotate, procps, and psmisc packages.

Yes, but these are the non-SE Linux patched utils, right?

> It looks like you are missing the run_program_macros.te file.  It should be in 
> /etc/selinux/macros/programs , you can copy it manually from 
> /usr/share/selinux/policy/default/macros/program/run_program_macros.te .

Ok, I copied that file into place. Now the error I get is:

/usr/sbin/checkpolicy:  loading policy configuration from
/etc/security/selinux/src/policy.conf
ERROR 'name conflict for type run_deb_t' at token ';' on line 121201:
#
type run_deb_t, domain, privrole, privuser, privlog, auth;
/usr/sbin/checkpolicy:  error(s) encountered while parsing configuration
make: *** [/etc/security/selinux/policy.12] Error 1

Upon doing some digging in policy.conf I see that type run_deb_t is indeed
declared twice. It is declared in all.te and in all_domains.te but those
are in /usr/share/selinux/policy/current and default. What is the
relationship of those two dirs to /etc/selinux/domains? Looks like stuff
has been moved around compared to the RedHat version.

-- 
Tracy Reed      http://www.ultraviolet.org
"Our products just aren't engineered for security." - Brian Valentine, 
senior VP in charge of Microsoft's Windows development 5 Sept 2002

[-- Attachment #2: Type: application/pgp-signature, Size: 240 bytes --]