SELinux on Debian (Sid)

[Magnus Therning <magnus-work@therning.org>]

[-- Attachment #1: Type: text/plain, Size: 1601 bytes --]

I have run into some problems with getting a Debian box up and running
with SELinux. Maybe someone can offer some insights?

Installing selinux-default-policy failed, make complains about 'chsid'
not being present. These are the problems I run into when trying to
complete the installation of the policies:

 1. The makefile in /etc/selinux uses 'chsid'. This is the line:

      chsid system_u:object_r:policy_config_t /ss_policy

    Apparently that tool has been replaced by 'chcon'.

      chcon -u system_u -r object_r -t policy_config_t /ss_policy

    On a standard kernel this gave the following error message:
      
      chcon: invalid security context

 2. The path to 'load_policy' is wrong in /etc/selinux/Makefile it now
    lives in /usr/sbin rather than /usr/bin. Also the variable
    LOADPOLICY isn't used at all, instead every reference to
    'load_policy' is written like this:

      $(BINDIR)/load_policy

    A little silly (-:

 3. 'make relabel' fails on a standard kernel:

      load_policy: security_load_policy failed

    After rebooting using my SE-kernel 'make relabel' also fails:

      security:  policydb magic number 0x8 does not match expected magic number 0xf97cff8c
      load_policy: security_load_policy failed

Now I am stuck :-( I simply don't know where to look for a thread to
pull to clean up the mess.

/M

-- 
Magnus Therning  mailto:therning@sourceforge.natlab.research.philips.com
+31-40-2745179  http://pww.innersource.philips.com/magnus/
OpenPGP:0x4FBB2C40

X-Windows: ...The art of incompetence. 

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]