SELinux source

SELinux source

[Subba Rao]

Hello again,

I have question about SELinux source.  I have downloaded the entire package for 2.4.19 (which includes Linux source).
Is this source modified for SELinux or is it the same as what I download from http://www.kernel.org? 

After extracting the compressed file, there are 2 directories.  One is LSM-2.4 and the other is SELINUX.  The LSM-2.4 tree looks
similar to what I usually download from the kernel.org site.

If it is similar, can I use "make xconfig" to configure SELinux?  (I am assuming X will work normally in SELinux).

Is the compilation process different for the source in SELINUX directory? Will "make bzImage" take care of the source in SELINUX directory?                                                                                                                

Subba Rao
sailorn@attglobal.net
2002-11-07



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SELinux source

[Stephen D. Smalley]

> I have question about SELinux source.  I have downloaded the entire package 
for 2.4.19 (which includes Linux source).
> Is this source modified for SELinux or is it the same as what I download from 
http://www.kernel.org? 

It is modified for SELinux, but derived from the original sources from
kernel.org.  If you prefer, you can use one of the other download options
to just download the patches and apply them yourself to the kernel.org sources.

> After extracting the compressed file, there are 2 directories.  One is LSM-2.4 
and the other is SELINUX.  The LSM-2.4 tree looks
> similar to what I usually download from the kernel.org site.

Yes, the lsm-2.4 tree is a patched copy of the kernel sources.  LSM stands
for Linux Security Modules (lsm.immunix.org), a general kernel patch jointly 
developed by several security projects to replace the individual 
project-specific kernel patches.

> If it is similar, can I use "make xconfig" to configure SELinux?  (I am 
>assuming X will work normally in SELinux).

Yes, you can use 'make xconfig'.  But first, you need to apply an additional 
patch from selinux/module/selinux-2.4.patch.  See the instructions in 
selinux/README.

> Is the compilation process different for the source in SELINUX directory? Will 
>"make bzImage" take care of the source in SELINUX directory?                                                                                                                

The selinux directory contains a number of components, including an additional
kernel patch, a policy configuration, and userland components.  See 
selinux/README for full instructions.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SELinux source

[Ying-Hung Chen]

Hello,

>
> After extracting the compressed file, there are 2 directories.  One is 
> LSM-2.4 and the other is SELINUX.  The LSM-2.4 tree looks
> similar to what I usually download from the kernel.org site.
>  
>
The files in LSM-2.4 is lsm patched kernel source , so it is not the 
same as vanilla kernel source you download from http://www.kernel.org

> If it is similar, can I use "make xconfig" to configure SELinux?  (I 
> am assuming X will work normally in SELinux).
>
yes, you can run make xconfig to configure SELinux (remember, when you 
are configuring SELinux, you are NOT running SELinux). You should not 
run X on SELinux unless you really want to

please refer to http://www.nsa.gov/selinux/doc/readme.html for details

>
> Is the compilation process different for the source in SELINUX 
> directory? Will "make bzImage" take care of the source in SELINUX 
> directory?                                                                                                                
>
>  
>
The above link also explain the compilation details,

-Ying




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.