Re: Debian SELinux backports project

[Dale Amon <amon@vnl.com>]

[-- Attachment #1: Type: text/plain, Size: 1901 bytes --]

On Thu, Nov 17, 2005 at 03:27:24PM +0100, Erich Schubert wrote:
> Hi Luke,
> I'll not support older kernels. I'll recommend to either build your own
> kernel, or get the linux-image 2.6.14+ from unstable.
> Fortunately, the linux kernel doesn't depend on much userspace programs.
> Obviously, the kernel cannot depend on a library, which is very
> nice. ;-)
> But the debian "vanilla" kernels do depend on a tool to generate
> appropriate init ramdisks, so I'll probably include an unmodified
> "backport" of yaird or one of the other initrd tool, once I've decided
> which I prefer. Yaird worked okay on a test machine of mine, but not on
> a second one, unfortunately; but I don't know why yet... Looked like
> some module was missing for mounting the root which is on software raid;
> the "old" kernel had these drivers built in, making it of course harder
> for yaird to detect the appropriate modules...

I've spent loads of time on the Debian battle myself ;-)

One of the issues with the kernel is that last time I
looked, even the kernel source packages in etch were
rather oldish. I'm not against doing my own from scratch
from kernel.org, but for operational systems it is better
to depend on official debian kernel sources if at all
possible.

I expect I will come back to the selinux debian problem
within the next couple weeks as it is on my whiteboard
as something I would like to use in development project 
I'm currently working on.

FWIW, count me in.

-- 
------------------------------------------------------
             Artemis Systems Development
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]