Re: SELinux on Debian (Sid)

[Magnus Therning <magnus-work@therning.org>]

[-- Attachment #1: Type: text/plain, Size: 2732 bytes --]

I forgot to mention the contents of my /etc/apt/sources.list:

 deb http://ftp.uk.debian.org/debian/ testing main non-free contrib
 deb http://ftp.uk.debian.org/debian-non-US testing/non-US main contrib non-free

 deb http://ftp.uk.debian.org/debian/ unstable main non-free contrib
 deb http://ftp.uk.debian.org/debian-non-US sid/non-US main contrib non-free

 deb http://www.coker.com.au/newselinux/ ./

This together with the following line in /etc/apt/apt.conf should give
me a Sid system:

 APT::Default-Release "unstable";

I did a 'apt-get update' and a 'apt-get dist-upgrade' after this.

On Thu, Jun 10, 2004 at 06:17:28PM +1000, Russell Coker wrote:
>On Thu, 10 Jun 2004 00:44, Magnus Therning <magnus-work@therning.org> wrote:
>> Installing selinux-default-policy failed, make complains about
>> 'chsid' not being present. These are the problems I run into when
>> trying to complete the installation of the policies:
>
>Sounds like you have old SE Linux, that is ancient and no longer being
>supported.  It is only supported to kernel 2.4.21 upstream and 2.4.22
>on my web site (in the section that is no longer maintained).  I
>strongly recommend the new SE Linux.

The selinux-default-policy came from the apt-repository mentioned above.

My initial attempt to get things working was a few weeks ago, and then I
had even more problems, that time with the Makefile not being able to
handle the output from 'checkpolicy' (a cut -f 1 -d ' ' was needed).
This was apparently fixed.

>>  3. 'make relabel' fails on a standard kernel:
>>
>>       load_policy: security_load_policy failed
>>
>>     After rebooting using my SE-kernel 'make relabel' also fails:
>>
>>       security:  policydb magic number 0x8 does not match expected magic
>> number 0xf97cff8c load_policy: security_load_policy failed
>
>Sounds like you have new SE Linux in the kernel and old SE Linux in the
>utilities.  Don't use the packages in woody.  Start with Brian's
>back-ports if you want to use SE Linux in woody, but they haven't been
>maintained for a while either.  It's best to use Debian/unstable (the
>next version of Debian will be out soon so there seems little point in
>starting with the old version now).

Again all packages come from your repository.

I'll take a look at it again later today, to see if there has been any
new packages uploaded since my last attempt.

/M

-- 
-----------------------------------------------------------------------
Magnus Therning                 Philips Research Laboratories Eindhoven
Phone: +31 40 2745179           (OpenPGP: 0x4FBB2C40)

Certum est, quia impossibile. (It is certain, because it is impossible.)
     -- Tertullianus

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]