Re: Package install probs

[Dale Amon <amon@vnl.com>]

On Fri, Aug 29, 2003 at 01:49:15AM +1000, Russell Coker wrote:
> However if you use a syslogd that includes klogd functionality in the main 
> program (such as syslog-ng) then the thing to do is add the ability to read 
> /proc/kmsg to syslogd_t and change assert.te to refer to syslogd_t instead of 
> klogd_t.

Yep, I switched to syslog-ng and never looked back :-)

Semi-auto install didn't add syslogd.te at all, probably because
it doesn't know about syslog-ng. I had to move that one manually.

I notice you already have the syslog-ng lines in syslogd.te, just
commented out.

dpkg.te also refers to klogd, so I commented that line out
The install does not ignore dpkg.te~ by the way... I stopped it
and deleted the emacs ~ file before procedding with the build.

In assert.te I commented out the assert_execute(klogd). I presume
that's what should be done as there's already and ifdef on 
execute syslogd further down.

Built the policy but it failed to load. I may not have
built capabilities on this kernel so I'll have to double
check that, rebuild and reboot.

-- 
------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.