Re: SELinux query

Re: SELinux query

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/07/2012 01:00 AM, Devendra Talegaonkar wrote:
> Thanks a lot Dan,
> 
> Problem is solved. I am trying SELinux on IMX-53 QSB target. I am
> using kernel 2.6.38. Is there any information available about
> compiling and running SELinux on embedded targets?
> 
> 
You would probably get better response on SELinux
<selinux@tycho.nsa.gov> mail list

> Thanks & Regards, Devendra Talegaonkar | Lead Technical Consultant
> - Automotive & Engineering | KPIT Cummins Infosystems Ltd | Ph: +
> 91 20 6652 5000 | M: +91 9822860528
> 
> -----Original Message----- From: Daniel J Walsh
> [mailto:dwalsh@redhat.com] Sent: Monday, February 06, 2012 8:23 PM 
> To: Devendra Talegaonkar Subject: Re: SELinux query
> 
> On 02/06/2012 02:19 AM, Devendra Talegaonkar wrote:
> 
> Seems like you have a policy /checkpolicy version problem.  IE
> Newer checkpolicy compiler require roles to be specified before
> use.
> 
> 
> role system_r;
> 
> role system_r type httpd_t;
> 
> Older compilers allowed you to just specify the second command.
> 
> What policy and what version of checkpolicy are you compiling and
> is this on fedora?
> 
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8xWRoACgkQrlYvE4MpobOtCgCdGsmOByZ5SusGZp7VM3AguZST
T1MAn1rwVFjnfj3NUumVZmnJmrLplSUi
=DUPr
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SELinux query

[Stephen Smalley]

On 02/07/2012 01:00 AM, Devendra Talegaonkar wrote:
> Problem is solved. I am trying SELinux on IMX-53 QSB target. I am
> using kernel 2.6.38. Is there any information available about
> compiling and running SELinux on embedded targets?

Some older resources on embedded SELinux can be found at:
http://elinux.org/SELinux

Also, in the case of Android, information about using SELinux can be
found at:
http://selinuxproject.org/page/SEAndroid

While your target might not be running Android, you may nonetheless find
parts of our SE Android reference implementation useful, particularly
with its emphasis on a minimal port of the SELinux userspace and a small
policy written from scratch.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: SELinux query

[Stephen Smalley]

On Wed, 2012-02-08 at 09:50 +0000, Devendra Talegaonkar wrote:
> Hello,
> I am trying to load policy in kernel with  load_policy utility.
> Selinuxfs is mounted on /selinux and there is enough space on the /selinux. But at the time of  mounting it is giving me error as "No space left on device"
> Can you please guide on this?

- Need to know what libselinux you are using, e.g. the upstream one (if
so, what version) or the port to Android.
- Need to know what load_policy you are using, e.g. the one from
policycoreutils (if so, what version), the port to busybox (if so, what
version), or the port to Android toolbox.
- The actual error message would be helpful.
- strace of the failed load_policy would be helpful, if you have a
working strace for that target.
- libselinux was recently changed to mount selinuxfs on /sys/fs/selinux
and look for it there first, falling back to /selinux if it isn't there.
Don't know if that might be making a difference for you.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.