Debian package: how to relabel

Debian package: how to relabel

[Dale Amon]

Question for either one of you. How do I do the equiv
of a make relabel with the debian package install? I
have a man page for setfiles but can't seem to find
the command itself...

-- 
------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Debian package: how to relabel

[Russell Coker]

On Sun, 14 Sep 2003 02:05, Dale Amon wrote:
> Question for either one of you. How do I do the equiv
> of a make relabel with the debian package install? I
> have a man page for setfiles but can't seem to find
> the command itself...

make -C /etc/selinux relabel

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Debian package: how to relabel

[Dale Amon]

On Sun, Sep 14, 2003 at 02:22:39AM +1000, Russell Coker wrote:
> make -C /etc/selinux relabel

Close but no cigar. I'm missing /usr/sbin/setfiles.
What package should have installed it? I've got
a man page for it but no binary.

-- 
------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Debian package: how to relabel

[Dale Amon]

On Sat, Sep 13, 2003 at 05:32:59PM +0100, Dale Amon wrote:
> On Sun, Sep 14, 2003 at 02:22:39AM +1000, Russell Coker wrote:
> > make -C /etc/selinux relabel
> 
> Close but no cigar. I'm missing /usr/sbin/setfiles.
> What package should have installed it? I've got
> a man page for it but no binary.

In answer to my own question, it appears to be part of the
policycoreutils package, but is not installed for some
reason... I think a forced reinstall is in order!

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Debian package: how to relabel

[Russell Coker]

On Sun, 14 Sep 2003 02:42, Dale Amon wrote:
> On Sat, Sep 13, 2003 at 05:32:59PM +0100, Dale Amon wrote:
> > On Sun, Sep 14, 2003 at 02:22:39AM +1000, Russell Coker wrote:
> > > make -C /etc/selinux relabel
> >
> > Close but no cigar. I'm missing /usr/sbin/setfiles.
> > What package should have installed it? I've got
> > a man page for it but no binary.
>
> In answer to my own question, it appears to be part of the
> policycoreutils package, but is not installed for some
> reason... I think a forced reinstall is in order!

I guess there are problems with the dependencies for Debian packages.  
Reinstall is not necessary, just install policycoreutils (or is that what you 
meant?).

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Debian package: how to relabel

[Dale Amon]

On Sun, Sep 14, 2003 at 03:26:59AM +1000, Russell Coker wrote:
> I guess there are problems with the dependencies for Debian packages.  
> Reinstall is not necessary, just install policycoreutils (or is that what you 
> meant?).

No, a reinstall. There was a policycoreutils.list and etc already in
the system and a setfiles.8 man page. I did a

	apt-get install --reinstall policycoreutils

and just forced it. No idea why it gave me only a partial 
install.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Using Colin's Debian archive

[Dale Amon]

If you are trying to work with the experimental 
debian packages for selinux available from Colin's
site, you can fit it into your normal update 
procedures.

Add this line to the top of your /etc/apt/sources.list file:

deb http://web.verbum.org/debian experimental/

Add this to your /etc/apt/preferences file, or if
you haven't got one, make this the whole of it:

Package: *
Pin: release l=walters
Pin-Priority: 1100

This will also work with dselect if you are using
apt as the update method.

-- 
------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Debian package: how to relabel

[Colin Walters]

On Sat, 2003-09-13 at 12:05, Dale Amon wrote:
> Question for either one of you. How do I do the equiv
> of a make relabel with the debian package install? I
> have a man page for setfiles but can't seem to find
> the command itself...

You can relabel an individual package like this:

/etc/dpkg/postinst.d/selinux packagename


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.