automake

automake

[Joshua Brindle]

Are the patches to use automake with selinux going to be merged into the
selinux distribution on sourceforge? 

Joshua Brindle
UNIX Administrator
Southern Nazarene University

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

SGI Challenge XL

[egoodwin]

[-- Attachment #1: Type: text/plain, Size: 1197 bytes --]

Greetings all,

Has anyone worked with an SGI Challenge XL server and SE Linux as yet?  We 
would like to bring this server back from retirement and consider this 
project an excellent reason to do so.  While we still have IRIX 6.5.2 
loaded to the machine, we would rather have it running Linux.  Is it 
possible to patch IRIX's kernel, or should we go with Linux?  There is a 
version of Linux compiled for the Challenge XL, although its not exactly 
one that is in "active development".

Thank you in advance for any heads up we may receive on this.

Yours in Reason,
Eriks




R. Eriks Goodwin, CEO
UniMatrix International Corporation   http://www.unimatrix.com
2101 East Main Street, Richmond VA 23223, USA
421 West Main Street, Waynesboro VA  22980, USA
13455 Sunrise Valley Drive, Herndon VA  20171, USA

Tel: 804-780-0590 ext 2400   *   Fax: 804-780-0591

Unified Solutions for the Information Age
             http://www.unimatrix.com

"Productive work is the central purpose of a rational man's life, the 
central value that integrates and determines the hierarchy of all his 
other values. Reason is the source, the precondition of his productive 
work pride is the result."  --Ayn Rand

[-- Attachment #2: Type: text/html, Size: 1613 bytes --]

Re: SGI Challenge XL

[Russell Coker]

On Mon, 2 Dec 2002 14:50, egoodwin@unimatrix.com wrote:
> Has anyone worked with an SGI Challenge XL server and SE Linux as yet?  We
> would like to bring this server back from retirement and consider this
> project an excellent reason to do so.  While we still have IRIX 6.5.2
> loaded to the machine, we would rather have it running Linux.  Is it
> possible to patch IRIX's kernel, or should we go with Linux?  There is a
> version of Linux compiled for the Challenge XL, although its not exactly
> one that is in "active development".

SE Linux is not going to apply to other OSs without a lot of work.  I suspect 
that the IRIX kernel may have more in common with FreeBSD than Linux and 
therefore TrustedBSD may be of more use to someone wanting to get a hardened 
IRIX.  Of course this requires IRIX source code...

SE Linux could be ported to MIPS CPUs, and it shouldn't be that difficult.  
But it may be a lot easier to just buy a new Intel machine.  A quick google 
search suggests that we're talking about 8yo hardware, it shouldn't be 
difficult to buy a small cluster of Intel machines to deliver greater 
performance (which will probably cost you less than paying someone to port SE 
Linux to MIPS).

If the Linux port to that hardware is not actively maintained then that will 
be another problem for you in getting SE Linux to work.  No-one is doing much 
serious work on back-porting patches to older kernels.  In my Debian package 
I include some older patches (because they may be useful to someone and I 
don't bother deleting them in a hurry).  But I don't go that far and I rarely 
back-port patches.

It sounds like you would have to do some coding to get a recent 2.4.x kernel 
running on that hardware and then port SE Linux to MIPS.  Porting SE Linux is 
probably the easy task...

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SGI Challenge XL

[Casey Schaufler]

Russell Coker wrote:
> 
> On Mon, 2 Dec 2002 14:50, egoodwin@unimatrix.com wrote:
> > Has anyone worked with an SGI Challenge XL server and SE Linux as yet?  We
> > would like to bring this server back from retirement and consider this
> > project an excellent reason to do so.  While we still have IRIX 6.5.2
> > loaded to the machine, we would rather have it running Linux.  Is it
> > possible to patch IRIX's kernel, or should we go with Linux?  There is a
> > version of Linux compiled for the Challenge XL, although its not exactly
> > one that is in "active development".

True enough. We don't support Linux on our MIPS platforms, but
we do try to keep an eye out for people doing interesting things
with it. To date, I know of no one who has put SELinux onto a
MIPS platform.

> SE Linux is not going to apply to other OSs without a lot of work.

Give that man the Understatement of the Week Award!

> I suspect that the IRIX kernel may have more in common with FreeBSD than Linux and
> therefore TrustedBSD may be of more use to someone wanting to get a hardened
> IRIX.  Of course this requires IRIX source code...

Just an aside, but Irix is "hardened" already. The base OS is
Common Criteria evaluated  (that's a good thing) and includes
ACLs, audit, and POSIX capabilties. There's also a "Trusted Irix"
add on (costs extra, and I get credit for it!) with Mandatory Access
Control and the SuperUser removed.

> SE Linux could be ported to MIPS CPUs, and it shouldn't be that difficult.
> But it may be a lot easier to just buy a new Intel machine.  A quick google
> search suggests that we're talking about 8yo hardware, it shouldn't be
> difficult to buy a small cluster of Intel machines to deliver greater
> performance (which will probably cost you less than paying someone to port SE
> Linux to MIPS).

Most likely true.

-- 

Casey Schaufler				Manager, Trust Technology, SGI
casey@sgi.com				voice: 650.933.1634
casey_p@pager.sgi.com			Pager: 877.557.3184

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.