compiling LSM/SELinux fileutils

compiling LSM/SELinux fileutils

[James J.]

If this is not the proper list for a SELinux compile question please 
direct me to a better list.

I'm trying to compile the "Option 3 - Everything but Kernel Source" code 
and am running into trouble compiling in utils/fileutils-4.0.  I'm 
following the steps in the README file.  All goes well until step 6 
(Build and install the modified applications.)

I have made one deviation from the steps in the README.  The system is 
very stripped down, so logrotate, openssh, stat, and vixie-cron are not 
on the system.  I have eliminated these programs from the SUBDIRS line 
in the Makefile.
  
The first problem is that "make" fails because code in 
fileutils-4.0/aclocal.m4 is duplicated in fileutils-4.0/m4/isc-posix.m4. 
 Inserting "dnl " in front of lines 519-527 of aclocal.m4 (i.e. 
commenting out the duplicated lines) appears to fix this problem.  Is 
there a better solution?

The second problem is that "make" fails while running autoheader.  Here 
is the error message:

make[1]: Entering directory '/usr/src/selinux/utils/fileutils-4.0'
cd . && autoheader
autoheader: No template for symbol 'const'
autoheader: No template for symbol 'mode_t'
autoheader: No template for symbol 'off_t'
autoheader: No template for symbol 'size_t'
make[1]: *** [stamp-h.in] Error 1
make[1]: Leaving directory '/usr/src/selinux/utils/fileutils-4.0'
make: *** [all] Error 1

I'm not familiar with autoheader, so I'm having some difficulty 
diagnosing this problem.  Any ideas?

James



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

SELinux on embedded devices?

[Devon Hubbard]

My apologies to the list if there have been threads in the past on the
following question...

Has anyone worked on putting SELinux on embedded devices?  Of course PDAs
are by themselves inherently un-secure because of their portable nature but
embedded devices that have wireless connections need high security as well.

If you know if any existing projects for embedded devices please let me
know.

thanks,
dEVoN Hubbard
Motorola


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: compiling LSM/SELinux fileutils

[Stephen Smalley]

On Fri, 21 Sep 2001, James J. wrote:

> The first problem is that "make" fails because code in 
> fileutils-4.0/aclocal.m4 is duplicated in fileutils-4.0/m4/isc-posix.m4. 
>  Inserting "dnl " in front of lines 519-527 of aclocal.m4 (i.e. 
> commenting out the duplicated lines) appears to fix this problem.  Is 
> there a better solution?
> 
> The second problem is that "make" fails while running autoheader.  Here 
> is the error message:
> 
> make[1]: Entering directory '/usr/src/selinux/utils/fileutils-4.0'
> cd . && autoheader
> autoheader: No template for symbol 'const'
> autoheader: No template for symbol 'mode_t'
> autoheader: No template for symbol 'off_t'
> autoheader: No template for symbol 'size_t'
> make[1]: *** [stamp-h.in] Error 1
> make[1]: Leaving directory '/usr/src/selinux/utils/fileutils-4.0'
> make: *** [all] Error 1
> 
> I'm not familiar with autoheader, so I'm having some difficulty 
> diagnosing this problem.  Any ideas?

These errors don't sound like they are related to SELinux, just general
problems with autoconf - perhaps you need to upgrade your autoconf
package.  What is your base platform - is it RedHat 7.1?  Can you build
the ordinary fileutils source RPM that ships with your system?

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com






--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: SELinux on embedded devices?

[Stephen Smalley]

On Fri, 21 Sep 2001, Devon Hubbard wrote:

> Has anyone worked on putting SELinux on embedded devices?  Of course PDAs
> are by themselves inherently un-secure because of their portable nature but
> embedded devices that have wireless connections need high security as well.

This was discussed earlier on the thread starting at
http://marc.theaimsgroup.com/?l=selinux&m=97883795603704&w=2

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com






--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.