Re: default policy package

[Dale Amon <amon@vnl.com>]

On Mon, Nov 03, 2003 at 11:15:23AM -0500, Stephen Smalley wrote:
> On Mon, 2003-11-03 at 10:27, Dale Amon wrote:
> > Here's one that might interest Steve: load_policy can 
> > totally lock up a small memory machine if the binary 
> > policy is large.
> 
> What was the memory size and the policy size?  load_policy follows

16MB RAM on a 486DX. I've got a couple of them I use
for firewalls and testing. Poor little fellers were
about to get chucked in the skip.

I haven't got the policy size. I'll have to reset the
test system back to 'virgin' to get back to it. But 
it's easy enough to reproduce. Just take Russ's selinux-default-policy
package and answer Y to everything (I installed it and other
packages via a script the first time).

Disk makes noises for awhile, machine works away...
and then a 'top' screen I'm watching on vt2
freezes and then you can't do anything but hit the
power switch.

I 'cured' the problem by paring down the policy
to minimum size, and that loads just fine.

Note, if it is of interest, this is all being
done manually. kernel is booted with selinux=1,
but not with an initrd; I then

	mount -t selinuxfs none /selinux
	cd /etc/selinux; make install
	make load

What I'm actually working on is trying to get
an initial root file labeling working with a 
reiserfs... yeah, I finally got a round tuit. 

-- 
------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.