All of lore.kernel.org
 help / color / mirror / Atom feed
From: Daniel J Walsh <dwalsh@redhat.com>
To: TaurusHarry <harrytaurus2002@hotmail.com>
Cc: selinux-mailing-list <selinux@tycho.nsa.gov>
Subject: Re: How to cross install policy store?
Date: Tue, 18 May 2010 08:38:49 -0400	[thread overview]
Message-ID: <4BF28A59.402@redhat.com> (raw)
In-Reply-To: <BAY111-W21E4613ED1D1458B53C3A6ABE10@phx.gbl>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/18/2010 03:07 AM, TaurusHarry wrote:
> 
> HI SELinux experts,
> 
> I am trying to use SELinux on an ARM board with limited RAM <=128m, if I use semodule tool to create policy store on the target it will be terminated by kernel OOM killer. Normally semodule tool will install the policy store on the host, is it possible to cross-install the policy store to the target rootfs image on the host?
> 
> Thank you very much!
> 
> Best regards,
> Harry
>  		 	   		  
> _________________________________________________________________
> 想知道明天天气如何?必应告诉你!
> http://cn.bing.com/search?q=%E5%A4%A9%E6%B0%94%E9%A2%84%E6%8A%A5&form=MICHJ2
You should be able to build the policy on a different maching and just
install it on the ARM box.

Also you can add these flags to /etc/selinux/semanage.conf

    * Enable configuration of bzip behavior from Stephen Smalley.
      bzip-blocksize=0 to disable compression and decompression support.
      bzip-blocksize=1..9 to set the blocksize for compression.
      bzip-small=true to reduce memory usage for decompression
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkvyilkACgkQrlYvE4MpobMRogCeMIWdWC5XYKDWLM6mfeSD/aUC
Bt0AoIsnS4dWW/iLVe0vBV+QKY1OI86o
=5Y3x
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

  parent reply	other threads:[~2010-05-18 12:39 UTC|newest]

Thread overview: 26+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-05-18  7:07 How to cross install policy store? TaurusHarry
2010-05-18  7:38 ` waqar afridi
2010-05-18  9:02   ` Shaz
2010-05-18 12:38 ` Daniel J Walsh [this message]
2010-05-18 13:17   ` Shaz
2010-05-18 13:20     ` Stephen Smalley
2010-05-18 13:45       ` Stephen Smalley
2010-05-18 17:40         ` Shaz
2010-05-18 19:22           ` Stephen Smalley
2010-05-19  9:39             ` TaurusHarry
2010-05-19 10:04               ` Shaz
2010-05-19 13:21                 ` Justin P. Mattock
2010-05-19 13:34                   ` Stephen Smalley
2010-05-19 14:18                     ` Justin P. Mattock
2010-05-19 14:39                       ` Stephen Smalley
2010-05-19 16:01                         ` Justin P. Mattock
2010-05-19 17:49                           ` Christopher J. PeBenito
2010-05-19 18:17                             ` audit_event list ;was " Bryan Kropf
2010-05-19 22:47                             ` Justin P. Mattock
2010-05-19 10:01             ` Shaz
2010-05-19 13:33               ` Stephen Smalley
2010-05-19 14:03                 ` Shaz
2010-05-19 15:12                   ` Stephen Smalley
2010-05-19 15:27                     ` Shaz
2010-05-19 16:46                       ` Stephen Smalley
2010-05-19 16:49                         ` Shaz

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4BF28A59.402@redhat.com \
    --to=dwalsh@redhat.com \
    --cc=harrytaurus2002@hotmail.com \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.