* automake @ 2002-12-02 1:12 Joshua Brindle 2002-12-02 13:50 ` SGI Challenge XL egoodwin 0 siblings, 1 reply; 4+ messages in thread From: Joshua Brindle @ 2002-12-02 1:12 UTC (permalink / raw) To: selinux Are the patches to use automake with selinux going to be merged into the selinux distribution on sourceforge? Joshua Brindle UNIX Administrator Southern Nazarene University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
* SGI Challenge XL 2002-12-02 1:12 automake Joshua Brindle @ 2002-12-02 13:50 ` egoodwin 2002-12-02 16:16 ` Russell Coker 0 siblings, 1 reply; 4+ messages in thread From: egoodwin @ 2002-12-02 13:50 UTC (permalink / raw) To: selinux [-- Attachment #1: Type: text/plain, Size: 1197 bytes --] Greetings all, Has anyone worked with an SGI Challenge XL server and SE Linux as yet? We would like to bring this server back from retirement and consider this project an excellent reason to do so. While we still have IRIX 6.5.2 loaded to the machine, we would rather have it running Linux. Is it possible to patch IRIX's kernel, or should we go with Linux? There is a version of Linux compiled for the Challenge XL, although its not exactly one that is in "active development". Thank you in advance for any heads up we may receive on this. Yours in Reason, Eriks R. Eriks Goodwin, CEO UniMatrix International Corporation http://www.unimatrix.com 2101 East Main Street, Richmond VA 23223, USA 421 West Main Street, Waynesboro VA 22980, USA 13455 Sunrise Valley Drive, Herndon VA 20171, USA Tel: 804-780-0590 ext 2400 * Fax: 804-780-0591 Unified Solutions for the Information Age http://www.unimatrix.com "Productive work is the central purpose of a rational man's life, the central value that integrates and determines the hierarchy of all his other values. Reason is the source, the precondition of his productive work pride is the result." --Ayn Rand [-- Attachment #2: Type: text/html, Size: 1613 bytes --] ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: SGI Challenge XL 2002-12-02 13:50 ` SGI Challenge XL egoodwin @ 2002-12-02 16:16 ` Russell Coker 2002-12-04 19:56 ` Casey Schaufler 0 siblings, 1 reply; 4+ messages in thread From: Russell Coker @ 2002-12-02 16:16 UTC (permalink / raw) To: egoodwin, selinux On Mon, 2 Dec 2002 14:50, egoodwin@unimatrix.com wrote: > Has anyone worked with an SGI Challenge XL server and SE Linux as yet? We > would like to bring this server back from retirement and consider this > project an excellent reason to do so. While we still have IRIX 6.5.2 > loaded to the machine, we would rather have it running Linux. Is it > possible to patch IRIX's kernel, or should we go with Linux? There is a > version of Linux compiled for the Challenge XL, although its not exactly > one that is in "active development". SE Linux is not going to apply to other OSs without a lot of work. I suspect that the IRIX kernel may have more in common with FreeBSD than Linux and therefore TrustedBSD may be of more use to someone wanting to get a hardened IRIX. Of course this requires IRIX source code... SE Linux could be ported to MIPS CPUs, and it shouldn't be that difficult. But it may be a lot easier to just buy a new Intel machine. A quick google search suggests that we're talking about 8yo hardware, it shouldn't be difficult to buy a small cluster of Intel machines to deliver greater performance (which will probably cost you less than paying someone to port SE Linux to MIPS). If the Linux port to that hardware is not actively maintained then that will be another problem for you in getting SE Linux to work. No-one is doing much serious work on back-porting patches to older kernels. In my Debian package I include some older patches (because they may be useful to someone and I don't bother deleting them in a hurry). But I don't go that far and I rarely back-port patches. It sounds like you would have to do some coding to get a recent 2.4.x kernel running on that hardware and then port SE Linux to MIPS. Porting SE Linux is probably the easy task... -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: SGI Challenge XL 2002-12-02 16:16 ` Russell Coker @ 2002-12-04 19:56 ` Casey Schaufler 0 siblings, 0 replies; 4+ messages in thread From: Casey Schaufler @ 2002-12-04 19:56 UTC (permalink / raw) To: selinux; +Cc: egoodwin Russell Coker wrote: > > On Mon, 2 Dec 2002 14:50, egoodwin@unimatrix.com wrote: > > Has anyone worked with an SGI Challenge XL server and SE Linux as yet? We > > would like to bring this server back from retirement and consider this > > project an excellent reason to do so. While we still have IRIX 6.5.2 > > loaded to the machine, we would rather have it running Linux. Is it > > possible to patch IRIX's kernel, or should we go with Linux? There is a > > version of Linux compiled for the Challenge XL, although its not exactly > > one that is in "active development". True enough. We don't support Linux on our MIPS platforms, but we do try to keep an eye out for people doing interesting things with it. To date, I know of no one who has put SELinux onto a MIPS platform. > SE Linux is not going to apply to other OSs without a lot of work. Give that man the Understatement of the Week Award! > I suspect that the IRIX kernel may have more in common with FreeBSD than Linux and > therefore TrustedBSD may be of more use to someone wanting to get a hardened > IRIX. Of course this requires IRIX source code... Just an aside, but Irix is "hardened" already. The base OS is Common Criteria evaluated (that's a good thing) and includes ACLs, audit, and POSIX capabilties. There's also a "Trusted Irix" add on (costs extra, and I get credit for it!) with Mandatory Access Control and the SuperUser removed. > SE Linux could be ported to MIPS CPUs, and it shouldn't be that difficult. > But it may be a lot easier to just buy a new Intel machine. A quick google > search suggests that we're talking about 8yo hardware, it shouldn't be > difficult to buy a small cluster of Intel machines to deliver greater > performance (which will probably cost you less than paying someone to port SE > Linux to MIPS). Most likely true. -- Casey Schaufler Manager, Trust Technology, SGI casey@sgi.com voice: 650.933.1634 casey_p@pager.sgi.com Pager: 877.557.3184 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2002-12-04 19:57 UTC | newest] Thread overview: 4+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2002-12-02 1:12 automake Joshua Brindle 2002-12-02 13:50 ` SGI Challenge XL egoodwin 2002-12-02 16:16 ` Russell Coker 2002-12-04 19:56 ` Casey Schaufler
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.