setfiles and non-SE systems

[Russell Coker <russell@coker.com.au>]

lstat64("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lgetxattr("/", "security.selinux", 0x84789a0, 255) = -1 EOPNOTSUPP (Operation 
no
t supported)
dup(2)                                  = 3
fcntl64(3, F_GETFL)                     = 0x2 (flags O_RDWR)
fstat64(3, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
0
x4001a000
_llseek(3, 0, 0xbfffe640, SEEK_CUR)     = -1 ESPIPE (Illegal seek)
write(3, "/: Operation not supported\n", 27) = 27
close(3)                                = 0
munmap(0x4001a000, 4096)                = 0
write(2, "setfiles:  unable to obtain attr"..., 49) = 49

Above is part of the strace output from trying to run setfiles on a non-SE 
system (kernel 2.4.22 with the ACL patch but no SE patch).

It appears that if we had a kernel patch to provide the security.selinux name 
space as a regular xattr on non-SE systems then we could label the file 
system before installing a SE Linux kernel.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.