RE: mkinitrd on Debian

RE: mkinitrd on Debian

[CDSelle]

[-- Attachment #1: Type: text/plain, Size: 1001 bytes --]

Russel,

We haven't met, but I'm a SELinux user trying to install on a Debian system.
Is the script you attached to this message in October still current, or is
there a better way to make a SELinux initrd for Debian sid systems now?

Thanks,
Chad Sellers



-----Original Message-----
From: Russell Coker [mailto:russell@coker.com.au]
Sent: Tuesday, October 07, 2003 9:27 AM
To: SE Linux
Subject: mkinitrd on Debian


If you copy the attached script into /etc/mkinitrd/scripts on a Debian
system 
then it should support building a correct initrd for the new SE Linux.

Should being the operative word, as I have not converted any Debian systems 
which support initrd to the new SE Linux I could not properly test this.

Let me know how it works.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


[-- Attachment #2: selinux-mkinitrd --]
[-- Type: application/octet-stream, Size: 288 bytes --]

#!/bin/sh

cp /etc/security/selinux/policy.15 $INITRDDIR
cp /usr/sbin/load_policy $INITRDDIR/sbin
mkdir $INITRDDIR/selinux
cat > $INITRDDIR/scripts/selinux << END
mount -n none -t selinuxfs /selinux
/sbin/load_policy /policy.15
umount -n /selinux
END
chmod 755 $INITRDDIR/scripts/selinux

Re: mkinitrd on Debian

[Russell Coker]

On Wed, 28 Apr 2004 06:23, CDSelle@missi.ncsc.mil wrote:
> We haven't met, but I'm a SELinux user trying to install on a Debian
> system. Is the script you attached to this message in October still
> current, or is there a better way to make a SELinux initrd for Debian sid
> systems now?

The correct procedure now is to do nothing special with an initrd and to use 
the modified sysvinit package from my site which will have /sbin/init loading 
the policy before doing any serious work.  If you add the following 
to /etc/apt/sources.list then an upgrade should take care of this for 
Debian/unstable.

deb http://www.coker.com.au/newselinux/ ./

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: mkinitrd on Debian

[Dale Amon]

On Wed, Apr 28, 2004 at 06:46:55AM +1000, Russell Coker wrote:
> The correct procedure now is to do nothing special with an initrd and to use 
> the modified sysvinit package from my site which will have /sbin/init loading 
> the policy before doing any serious work.  If you add the following 
> to /etc/apt/sources.list then an upgrade should take care of this for 
> Debian/unstable.
> 
> deb http://www.coker.com.au/newselinux/ ./

BTW Russell... tell Faye (if she isn't on the list) 
that she did an excellent job with her HowTo's. I
printed a copy out the other day just for fun. Very
clear description of the new way of doing things
and it might be helpful for this fellow too if you've
the links handy.

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

mkinitrd on Debian

[Russell Coker]

[-- Attachment #1: Type: text/plain, Size: 582 bytes --]

If you copy the attached script into /etc/mkinitrd/scripts on a Debian system 
then it should support building a correct initrd for the new SE Linux.

Should being the operative word, as I have not converted any Debian systems 
which support initrd to the new SE Linux I could not properly test this.

Let me know how it works.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

[-- Attachment #2: selinux-mkinitrd --]
[-- Type: application/x-shellscript, Size: 288 bytes --]