Re: State of Debian SELinux

[Dale Amon <amon@vnl.com>]

[-- Attachment #1: Type: text/plain, Size: 2027 bytes --]

On Sun, Sep 18, 2005 at 01:15:12AM +0100, Luke Kenneth Casson Leighton wrote:
> dale, hi,

And hello yourself. I've been a bit scarce on this list lately.
Business has been good for a change... so no playtime. :-)
 
> i did manage to set up debian/selinux - back when 2.6.6 -> 2.6.9 was in
> "unstable".
> it was painful, took about four to five months, and it worked.

Ouch. Well, I'm only interested in getting it up on rack mount
server class machines with no fancy workstation apps on them. 
Nothing but LAMP's.
 
> you will NOT get sarge to work [as-is].

But can you start from the sarge iso and upgrade? Or should I look
at whatever they have as the latest and most bleeding edge "don't
look at me crosseyed or I'll fall over" sid iso?
 
> you WILL need libselinux1 for a start and because of the freeze
> some 18 months ago libselinux1 did NOT make it into sarge.

I'm picking that up from Russel's repository during the upgrade
and it does install okay.
 
> you _will_ need the patched version of dpkg - the one that
> sets selinux file contexts on files as it unpacks them - just
> like rpm does.

Yeah, but that shouldn't matter yet: the problems are in the
initial upgrade to SELinux packages so the file system isn't
labeled yet and the kernel is still the base debian one. 
 
> sorry that's a bit long-winded and probably difficult to
> understand but i'm trying to pack stuff in quickly as i remember it -
> from several months ago - without time for review of what i've written.

Oh, that's fine. Many of the items you note will
be time savers. Once I get the initial selinux package
install to work that is...

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]