From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from goalie.tycho.ncsc.mil (goalie [144.51.242.250]) by tarius.tycho.ncsc.mil (8.14.4/8.14.4) with ESMTP id s31Cg7G4004028 for ; Tue, 1 Apr 2014 08:42:07 -0400 Message-ID: <533AB41A.7000403@redhat.com> Date: Tue, 01 Apr 2014 08:42:02 -0400 From: Daniel J Walsh MIME-Version: 1.0 To: =?EUC-KR?B?v8C067y6?= , SELinux Subject: Re: Plz ask for help :) References: <002301cf4cc0$4138b160$c3aa1420$@oh@lge.com> <533967A3.70201@redhat.com> <002901cf4d4b$dfb10500$9f130f00$@oh@lge.com> In-Reply-To: <002901cf4d4b$dfb10500$9f130f00$@oh@lge.com> Content-Type: multipart/alternative; boundary="------------000700030601020004010500" List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: This is a multi-part message in MIME format. --------------000700030601020004010500 Content-Type: text/plain; charset=EUC-KR Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by mx1.redhat.com id s31Cg4t7020291 You need to subscribe to the SELinux upstream list for kernel questions. http://www.nsa.gov/research/selinux/subscribe.shtml On 03/31/2014 09:44 PM, =BF=C0=B4=EB=BC=BA wrote: > > Hi all, > > My name is Daesung and i am Korean. > > I am studying selinux and i have difficulty doing it. > > So i send email to you. > > Now, i am trying selinux porting on embedded Linux. > > Kernel version is 3.10.19-32. > > and configuration about selinux is as in the following: > > CONFIG_AUDIT=3Dy > > CONFIG_AUDIT_GENERIC=3Dy > > CONFIG_NETWORK_SECMARK=3Dy > > CONFIG_EXT2_FS_SECURITY=3Dy > > CONFIG_EXT3_FS_SECURITY=3Dy > > CONFIG_EXT4_FS_SECURITY=3Dy > > CONFIG_JFS_SECURITY=3Dy > > CONFIG_REISERFS_FS_SECURITY=3Dy > > CONFIG_JFFS2_FS_SECURITY=3Dy > > CONFIG_SECURITY=3Dy > > CONFIG_SECURITY_NETWORK=3Dy > > CONFIG_SECURITY_SELINUX=3Dy > > CONFIG_SECURITY_NETWORK_XFRM=3Dy > > CONFIG_NETLABEL=3Dy > > CONFIG_SECURITY_SELINUX_BOOTPARAM=3Dy > > CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=3D1 > > CONFIG_SECURITY_SELINUX_DISABLE=3Dy > > CONFIG_SECURITY_SELINUX_DEVELOP=3Dy > > CONFIG_SECURITY_SELINUX_AVC_STATS=3Dy > > CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=3D1 > > CONFIG_SECURITY_SELINUX_ENABLE_SECMARK_DEFAULT=3Dy > > CONFIG_SECURITY_FILE_CAPABILITIES=3Dy > > CONFIG_DEFAULT_SECURITY_SELINUX=3Dy > > CONFIG_DEFAULT_SECURITY=3D"selinux" > > CONFIG_EXT2_FS_XATTR=3Dy > > CONFIG_EXT3_FS_XATTR=3Dy > > CONFIG_EXT4_FS_XATTR=3Dy > > CONFIG_REISERFS_FS_XATTR=3Dy > > But, selinux_complete_init function of security/selinux/hook.c is not > called. > > And if i run =A1=B0ls -Z=A1=B0 command, security context is not printed. > > $ ls -Z > > ? apparmor ? capability.c > > selinux_init function is called. but selinux_complete_init function is > not called and security context is not printed. > > *what should i try ? please help me.* > > Best Regards. > > Daesung. > --------------000700030601020004010500 Content-Type: text/html; charset=EUC-KR Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by mx1.redhat.com id s31Cg4t7020291 You need to subscribe to the SELinux upstream list <selinux@tycho.nsa.gov> for kernel questions.

http://www.nsa.gov/research/selinux/subscribe.= shtml

On 03/31/2014 09:44 PM, =BF=C0=B4=EB=BC= =BA wrote:

Hi all,

My name is Daesung an= d i am Korean.

I am studying selinux and i have difficulty doing it.

So i send email to yo= u.

Now, i am trying seli= nux porting on embedded Linux.

Kernel version is 3.10.19-32.

and configuration abo= ut selinux is as in the following:

CONFIG_AUDIT=3D= y

CONFIG_AUDIT_= GENERIC=3Dy

CONFIG_NETWOR= K_SECMARK=3Dy

CONFIG_EXT2_F= S_SECURITY=3Dy

CONFIG_EXT3_F= S_SECURITY=3Dy

CONFIG_EXT4_F= S_SECURITY=3Dy

CONFIG_JFS_SE= CURITY=3Dy

CONFIG_REISER= FS_FS_SECURITY=3Dy

CONFIG_JFFS2_= FS_SECURITY=3Dy

CONFIG_SECURI= TY=3Dy

CONFIG_SECURI= TY_NETWORK=3Dy

CONFIG_SECURI= TY_SELINUX=3Dy

CONFIG_SECURI= TY_NETWORK_XFRM=3Dy

CONFIG_NETLAB= EL=3Dy

CONFIG_SECURI= TY_SELINUX_BOOTPARAM=3Dy

CONFIG_SECURI= TY_SELINUX_BOOTPARAM_VALUE=3D1

CONFIG_SECURI= TY_SELINUX_DISABLE=3Dy

CONFIG_SECURI= TY_SELINUX_DEVELOP=3Dy

CONFIG_SECURI= TY_SELINUX_AVC_STATS=3Dy

CONFIG_SECURI= TY_SELINUX_CHECKREQPROT_VALUE=3D1

CONFIG_SECURI= TY_SELINUX_ENABLE_SECMARK_DEFAULT=3Dy

CONFIG_SECURI= TY_FILE_CAPABILITIES=3Dy

CONFIG_DEFAUL= T_SECURITY_SELINUX=3Dy

CONFIG_DEFAUL= T_SECURITY=3D"selinux"

CONFIG_EXT2_F= S_XATTR=3Dy

CONFIG_EXT3_F= S_XATTR=3Dy

CONFIG_EXT4_F= S_XATTR=3Dy

CONFIG_REISER= FS_FS_XATTR=3Dy

But, selinux_complete_init function of security/selinux/hook.c is not called.

And if i run =A1=B0ls= -Z=A1=B0 command, security context is not printed.
$ ls -Z

? apparmor = ; ? capability.c

selinux_init function= is called. but selinux_complete_init function is not called and security context is not printed.

what should i try = ? please help me.

Best Regards.

Daesung.<= /p>

--------------000700030601020004010500--