successfull loaded policy on s390, 64bit

successfull loaded policy on s390, 64bit

[Bastian Blank]

hi folks

i'm pleased to announce the successfull load of a policy on a 64bit
zSeries with 31bit userland.

i get many denies as the system is not properly set up, but it seems to
work.

bastian

-- 
We'll pivot at warp 2 and bring all tubes to bear, Mr. Sulu!

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: successfull loaded policy on s390, 64bit

[Richard Troth]

> i'm pleased to announce the successfull load of a policy on a 64bit
> zSeries with 31bit userland.

This is great news!

-- R;


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: successfull loaded policy on s390, 64bit

[Bastian Blank]

On Thu, Oct 30, 2003 at 06:30:43PM -0600, Richard Troth wrote:
> > i'm pleased to announce the successfull load of a policy on a 64bit
> > zSeries with 31bit userland.
> This is great news!

I forgot to say, that it wav a 2.6.0-test8. -test9 lockups like shit so i
can't do real testing. I hope IBM will provide patches for this problems
rather fast.

Bastian

-- 
Deflector shields just came on, Captain.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: successfull loaded policy on s390, 64bit

[Stephen Smalley]

On Fri, 2003-10-31 at 03:50, Bastian Blank wrote:
> On Thu, Oct 30, 2003 at 06:30:43PM -0600, Richard Troth wrote:
> > > i'm pleased to announce the successfull load of a policy on a 64bit
> > > zSeries with 31bit userland.
> > This is great news!
> 
> I forgot to say, that it wav a 2.6.0-test8. -test9 lockups like shit so i
> can't do real testing. I hope IBM will provide patches for this problems
> rather fast.

And how different is your userland from the upstream at this point?

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: successfull loaded policy on s390, 64bit

[Bastian Blank]

On Fri, Oct 31, 2003 at 09:10:36AM -0500, Stephen Smalley wrote:
> And how different is your userland from the upstream at this point?

- some 32/64 bit fixes
- uses enums instead of integers in roleop/op (policy_parse.y)

just look into svn://bblank.thinkmo.de/selinux/selinux/trunk, i hope it
includes any fix, need to recheck that this evening.

bastian

-- 
Oblivion together does not frighten me, beloved.
		-- Thalassa (in Anne Mulhall's body), "Return to Tomorrow",
		   stardate 4770.3.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: successfull loaded policy on s390, 64bit

[Stephen Smalley]

On Fri, 2003-10-31 at 09:53, Bastian Blank wrote:
> On Fri, Oct 31, 2003 at 09:10:36AM -0500, Stephen Smalley wrote:
> > And how different is your userland from the upstream at this point?
> 
> - some 32/64 bit fixes
> - uses enums instead of integers in roleop/op (policy_parse.y)
> 
> just look into svn://bblank.thinkmo.de/selinux/selinux/trunk, i hope it
> includes any fix, need to recheck that this evening.

You'll have to continue to submit patches to the list if you want these
changes upstreamed.  I've raised various concerns with some of the
patches submitted to date that still haven't been resolved AFAIK.

Also, as a side note, access via svn:// may not be open to many (I seem
to be having a problem with it), so exporting access via http:// would
be better, or creating a separate CVS module on the sourceforge site.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: successfull loaded policy on s390, 64bit

[Bastian Blank]

On Fri, Oct 31, 2003 at 12:32:40PM -0500, Stephen Smalley wrote:
> You'll have to continue to submit patches to the list if you want these
> changes upstreamed.  I've raised various concerns with some of the
> patches submitted to date that still haven't been resolved AFAIK.

I know, but please note that i just began to study at university, so I
need to manage that time consuming process first.

> Also, as a side note, access via svn:// may not be open to many (I seem
> to be having a problem with it), so exporting access via http:// would
> be better,

No, the support of http and the seperate svn protocol are equal.
Berkeley DB just have some large problems with slightly wrong
permissions, and the error message clearly explains this.

Bastian

-- 
I have never understood the female capacity to avoid a direct answer to
any question.
		-- Spock, "This Side of Paradise", stardate 3417.3

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.