From: Russell Coker <russell@coker.com.au>
To: Tracy R Reed <treed@ultraviolet.org>, selinux@tycho.nsa.gov
Subject: Re: SE Linux on Debian
Date: Wed, 2 Oct 2002 02:01:46 +0200 [thread overview]
Message-ID: <200210020201.46223.russell@coker.com.au> (raw)
In-Reply-To: <20021001153638.J5416@ultraviolet.org>
On Wed, 2 Oct 2002 00:36, Tracy R Reed wrote:
> deb http://www.microcomaustralia.com.au/debian/ stable selinux
>
> because that is what is in the topic on the IRC channel. Is it ok to
> install these from stable even though my distro is actually testing?
Yes, but you can get my packages for unstable from:
deb http://www.coker.com.au/selinux/ ./
> Here are the debs:
>
> libselinux-dev
> selinux
> selinux-policy-default
>
> But the new ps, ls, sshd, etc. do not seem to be included here. Where do I
> get those? Are they not in a deb?
They are in coreutils, fileutils, shellutils, textutils, cron, dpkg, ssh,
login, logrotate, procps, and psmisc packages.
> When I installed the new policy it asked a lot of questions such as:
>
> Setting up selinux-policy-default (2002082308-4.bam.1) ...
> File "domains/program/apache.te" changed.
> Copy/Ignore/Always ignore/view Diff [c/I/a/d]?
>
> I said Copy to all of them. I'm not running all of that but I will be
> playing with various different things so I want the latest policies
> installed. When it was done asking questions I got this error:
>
> /usr/sbin/checkpolicy: loading policy configuration from
> /etc/security/selinux/src/policy.conf
>
> ERROR 'parse error' at token 'run_program' on line 71322:
> run_program(sysadm_t, sysadm_r, deb, dpkg_exec_t, dpkg_t)
It looks like you are missing the run_program_macros.te file. It should be in
/etc/selinux/macros/programs , you can copy it manually from
/usr/share/selinux/policy/default/macros/program/run_program_macros.te .
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2002-10-02 14:43 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-01 22:36 SE Linux on Debian Tracy R Reed
2002-10-02 0:01 ` Russell Coker [this message]
2002-10-02 0:54 ` Tracy R Reed
2002-10-02 8:36 ` Russell Coker
2002-10-02 1:48 ` Brian May
2002-10-02 5:10 ` Tracy R Reed
2002-10-02 5:42 ` Tom
2002-10-02 6:17 ` Brian May
2002-10-02 6:27 ` Tracy R Reed
2002-10-02 7:20 ` Tom
2002-10-02 7:30 ` Tracy R Reed
2002-10-02 8:50 ` Russell Coker
2002-10-02 8:52 ` Russell Coker
2002-10-02 6:50 ` Tracy R Reed
2002-10-02 7:24 ` Tom
2002-10-02 8:54 ` Russell Coker
2002-10-02 21:31 ` Brian May
2002-10-02 21:42 ` Russell Coker
2002-10-02 22:10 ` Brian May
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200210020201.46223.russell@coker.com.au \
--to=russell@coker.com.au \
--cc=selinux@tycho.nsa.gov \
--cc=treed@ultraviolet.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.