I would like to help.

I would like to help.

[Joey Mitchell Comeau]

	Hi,
	I'm a programmer, and I would like to help out with the
development of selinux. Could someone please point me to what would be a
good place to start out, and what would be the most helpful to the effort
at this time?
	Thank you very much.
	Joey

[thisismyrifle,therearemanymorelikeit,butthis1ismine]



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[Will Dye]

Joey Mitchell Comeau writes:

> 	I'm a programmer, and I would like to help out with the
> development of selinux. Could someone please point me to what would 
> be a good place to start out, and what would be the most helpful to 
> the effort at this time?



With the disclaimer that I haven't had the time to follow my own 
advice here yet, I suggest taking a comprehensive look at...

	http://www.nsa.gov/selinux/

...with particular attention to the two background papers...

	http://www.nsa.gov/selinux/background.html

...plus the obvious stuff like the overview, FAQ, and docs.  I'd be 
very interested in hearing if you find any other good sources.  Good 
luck, and thanks for your offer to help.



--Will

_______________________________________________________________________
William Dye - Interim Chief Executive Cat-Herder - The Tweakdom Project
http://tweakdom.sourceforge.net - Never, ever speaking for my employers




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[Howard Holm]

For those who want to contribute, I would personally suggest looking at
the future work list <http://www.nsa.gov/selinux/todo.html> for some
potentially interesting things to work on, and the papers in
<http://www.nsa.gov/selinux/docs.html> for design information.  I strongly
urge you, or anyone, who wants to work on something to keep the list
informed about what you are doing and your progress.  This will help
people with similar interests coordinate, avoid duplication of effort, and
potentially allow other developers to offer advice

--
Howard Holm <hdholm@epoch.ncsc.mil>
Information Assurance Research Office
National Security Agency

> To: selinux@tycho.nsa.gov
> Subject: Re: I would like to help. 
> Date: Mon, 09 Apr 2001 17:16:01 -0500
> From: Will Dye <willdye@dsndata.com>
> 
> Joey Mitchell Comeau writes:
> 
> > 	I'm a programmer, and I would like to help out with the
> > development of selinux. Could someone please point me to what would 
> > be a good place to start out, and what would be the most helpful to 
> > the effort at this time?
> 
> 
> 
> With the disclaimer that I haven't had the time to follow my own 
> advice here yet, I suggest taking a comprehensive look at...
> 
> 	http://www.nsa.gov/selinux/
> 
> ...with particular attention to the two background papers...
> 
> 	http://www.nsa.gov/selinux/background.html
> 
> ...plus the obvious stuff like the overview, FAQ, and docs.  I'd be 
> very interested in hearing if you find any other good sources.  Good 
> luck, and thanks for your offer to help.
> 
> 
> 
> --Will
> 
> _______________________________________________________________________
> William Dye - Interim Chief Executive Cat-Herder - The Tweakdom Project
> http://tweakdom.sourceforge.net - Never, ever speaking for my employers

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[bcarver2]

Howard,

I have ported Flask for Linux 2.4.2 version to the PowerPC
(an IBM 44P-270 POWER3 server, to be specific, although
the changes should be generic enough to run on any PowerPC
platform).  Where should I send the patches?

Howard Holm wrote:

> For those who want to contribute, I would personally suggest looking at
> the future work list <http://www.nsa.gov/selinux/todo.html> for some
> potentially interesting things to work on, and the papers in
> <http://www.nsa.gov/selinux/docs.html> for design information.  I strongly
> urge you, or anyone, who wants to work on something to keep the list
> informed about what you are doing and your progress.  This will help
> people with similar interests coordinate, avoid duplication of effort, and
> potentially allow other developers to offer advice
>
> --
> Howard Holm <hdholm@epoch.ncsc.mil>
> Information Assurance Research Office
> National Security Agency
>

--
Bob Carver

``Being politically correct means always having to say you're sorry.''
--Charles Osgood




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[Howard Holm]

I would suggest sending the patches to this list (a tarred gziped
attachment should work). That will ensure everyone has the ability to
review them and perhaps use them as a base for other work.  We'll see
them here as well and see what we can do about including them in a future
release.  Of course, it makes life easier for everyone if you make
sure that the code and your mail message makes clear that you are the
author and that you're releasing your changes under the GPL.

I would personally be interested in hearing about your experience
porting, (i.e., what you had to change and any problems you had) since
you're the first person I'm aware of to port selinux to another
architecture.  I'm sure other potential porters on the list might also
be interested.

> From: bcarver2@austin.ibm.com
> Date: Tue, 10 Apr 2001 15:21:45 -0500
> To: Howard Holm <hdholm@epoch.ncsc.mil>
> CC: selinux@tycho.nsa.gov
> Subject: Re: I would like to help.
> 
> Howard,
> 
> I have ported Flask for Linux 2.4.2 version to the PowerPC
> (an IBM 44P-270 POWER3 server, to be specific, although
> the changes should be generic enough to run on any PowerPC
> platform).  Where should I send the patches?
> 
> Howard Holm wrote:
> 
> > For those who want to contribute, I would personally suggest looking at
> > the future work list <http://www.nsa.gov/selinux/todo.html> for some
> > potentially interesting things to work on, and the papers in
> > <http://www.nsa.gov/selinux/docs.html> for design information.  I strongly
> > urge you, or anyone, who wants to work on something to keep the list
> > informed about what you are doing and your progress.  This will help
> > people with similar interests coordinate, avoid duplication of effort, and
> > potentially allow other developers to offer advice
> >
> > --
> > Howard Holm <hdholm@epoch.ncsc.mil>
> > Information Assurance Research Office
> > National Security Agency
> >
> 
> --
> Bob Carver
> 
> ``Being politically correct means always having to say you're sorry.''
> --Charles Osgood

--
Howard Holm <hdholm@epoch.ncsc.mil>
Information Assurance Research Office
National Security Agency

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[bcarver2]

[-- Attachment #1: Type: text/plain, Size: 2626 bytes --]

Howard,

The patch file is attached for PowerPC.  As the README says,
I am the author and I am releasing this under the GPL with
no warranties or guarantees of any kind!

First, the disclaimer: this stuff builds and runs in warning mode
on the machine I used to port it (an IBM 44P-270 server with
1.5 GB of RAM). I have not tested it extensively, however, so
there are no guarantees it will work for anyone else.  I don't have
time to do extensive testing at the present time.

The port went smoothly once SuSE released their 7.1 for PowerPC
about 10 days ago. That release uses the 2.4.2 kernel, so I didn't have
to deal with huge differences.  There were several times when the
build broke and I was able to pull in a fix from the SuSE tree and
fix it quickly.

There is one place in arch/ppc/kernel/process.c where
do_execve_secure() is called with some register parameters and
I had to just guess that it would work to use the next register.  I
left some comments in there (see BC:) because I thought for
sure that it would crash there.  Maybe it's not called in warning
mode?

Most of the changes were very straightforward.  Basically, I just
looked in the i386 architecture specific parts of the tree for
CONFIG_FLASK and made corresponding changes on the
ppc side.  The rest of the changes were identified when the
build broke.

I had a little trouble getting the utilities to build top-down, but
I was able to build each directory manually without many problems
(vixie-cron was the only utility I had to modify, I believe).

Howard Holm wrote:

> I would suggest sending the patches to this list (a tarred gziped
> attachment should work). That will ensure everyone has the ability to
> review them and perhaps use them as a base for other work.  We'll see
> them here as well and see what we can do about including them in a future
> release.  Of course, it makes life easier for everyone if you make
> sure that the code and your mail message makes clear that you are the
> author and that you're releasing your changes under the GPL.
>
> I would personally be interested in hearing about your experience
> porting, (i.e., what you had to change and any problems you had) since
> you're the first person I'm aware of to port selinux to another
> architecture.  I'm sure other potential porters on the list might also
> be interested.
>
> --
> Howard Holm <hdholm@epoch.ncsc.mil>
> Information Assurance Research Office
> National Security Agency

--
Bob Carver

``Being politically correct means always having to say you're sorry.''
--Charles Osgood



[-- Attachment #2: selinux-2.4.2-ppc.patch.tar.gz --]
[-- Type: application/octet-stream, Size: 56336 bytes --]

Re: I would like to help.

[Will Dye]

Howard Holm writes:

> I would suggest sending the patches to this list (a tarred gziped
> attachment should work). 


Quite a few people check their e-mail over a slow dialup line once 
in a while, including me.  Instead of broadcasting a potentially 
large file to an entire audience, please consider storing the file 
in an accessible location, and broadcasting only a pointer to the 
file.  

For storing the file, there are several options available.  For 
example, someone could set up a SourceForge project.  This would 
automatically include relatively convenient CVS storage, and 
several other services.  

Any volunteers to set up an FTP site?  Sourceforge project?  It 
would be best if the SELinux folks themselves ran it, but if no 
one else is available, I'll volunteer.  I'd rather set up a site 
from my fast link at work, than scroll through a zip attachment 
whenever I check e-mail from my slow link at home.


--Will


William L. Dye      | It's O.K. to be anal retentive, as long as all
Software Enginerd   | of the anuses that you retain are meticulously
willdye@willdye.com | sorted, arranged, categorized, & cross-indexed.



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Mirror sites

[frenzy@frenzy.org]

 Along the lines of storing that file, are there any proposals for mirror
sites currently? If so, I would be willing to host a mirror in Oregon. If not,
would proper clearance have to be obtained, or could some of us get together
and get it started? While the 31meg download is not a problem for those of
us who currently have high speed connections, it would be nice for
dialup/low-speed broadband users to have several download sites to choose
from.
 I would be willing to work with a group to hash out some update policies
for the mirror sites if more people are interested and it would be
feasible.
Sincerely,

Randy McClelland-Bane
http://www.frenzy.org
MSN: drekbot@hotmail.com ICQ: 32276169
"We must be the change we wish to see
in the world." - Mahatma Gandhi





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Mirror sites

[Grant Bayley]

Hi Randy,

I'm already running an unofficial one in Australia but I've announced
it's presence a couple of times here before.  At present, since
the files are only available via HTTP, it's manually updated whenever a
new release is announced or put online.

You're welcome to simply mirror from this if you like:

http://the.wiretapped.net/security/operating-systems/selinux/
ftp://ftp.wiretapped.net/pub/security/operating-systems/selinux/

On the issue of "clearance" I can't honestly think of why you'd need it
given the files are already available to all and sundry and based on a
GPL-licenced product.  What me worry anyway - I'm not American!

Grant

-------------------------------------------------------
Grant Bayley                         gbayley@ausmac.net
-Admin @ AusMac Archive, Wiretapped.net, 2600 Australia
 www.ausmac.net   www.wiretapped.net   www.2600.org.au
-------------------------------------------------------


On Tue, 10 Apr 2001, frenzy@frenzy.org wrote:

>  Along the lines of storing that file, are there any proposals for mirror
> sites currently? If so, I would be willing to host a mirror in Oregon. If not,
> would proper clearance have to be obtained, or could some of us get together
> and get it started? While the 31meg download is not a problem for those of
> us who currently have high speed connections, it would be nice for
> dialup/low-speed broadband users to have several download sites to choose
> from.
>  I would be willing to work with a group to hash out some update policies
> for the mirror sites if more people are interested and it would be
> feasible.
> Sincerely,
>
> Randy McClelland-Bane
> http://www.frenzy.org
> MSN: drekbot@hotmail.com ICQ: 32276169
> "We must be the change we wish to see
> in the world." - Mahatma Gandhi
>
>
>
>
>
> --
> You have received this message because you are subscribed to the selinux list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
>


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.