I would like to help.

I would like to help.

[Joey Mitchell Comeau]

	Hi,
	I'm a programmer, and I would like to help out with the
development of selinux. Could someone please point me to what would be a
good place to start out, and what would be the most helpful to the effort
at this time?
	Thank you very much.
	Joey

[thisismyrifle,therearemanymorelikeit,butthis1ismine]



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[Will Dye]

Joey Mitchell Comeau writes:

> 	I'm a programmer, and I would like to help out with the
> development of selinux. Could someone please point me to what would 
> be a good place to start out, and what would be the most helpful to 
> the effort at this time?



With the disclaimer that I haven't had the time to follow my own 
advice here yet, I suggest taking a comprehensive look at...

	http://www.nsa.gov/selinux/

...with particular attention to the two background papers...

	http://www.nsa.gov/selinux/background.html

...plus the obvious stuff like the overview, FAQ, and docs.  I'd be 
very interested in hearing if you find any other good sources.  Good 
luck, and thanks for your offer to help.



--Will

_______________________________________________________________________
William Dye - Interim Chief Executive Cat-Herder - The Tweakdom Project
http://tweakdom.sourceforge.net - Never, ever speaking for my employers




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

build-apps trouble.

[Joey Mitchell Comeau]

Hi.

I'm working through the installation of selinux and the build-apps tool is
quitting with 
stat*: no match. 

I looked in utils and there are no directories that start with stat, only
spasswd and newrole

Everything in build-apps.log looks like

-----------PASTE
make[1]: Entering directory
`/root/slinux/slinux/syscalls/unix_stream_client'
gcc  -c -I../../include -I../../kernel/include unix_stream_client.c
unix_stream_client.o be done...
-----------/PASTE

Which I assume means a-ok.
The following got printed to stderr when it was running,

-------------PASTE
msgwrite.c: In function `main':
msgwrite.c:103: warning: passing arg 2 of `msgsnd_secure' from
incompatible pointer type
------------/PASTE

Has something gone wrong earlier in the process?

I am working with the support files tarball from the nsa page, 
as well as the full tree for 2.2.18 from same page.

So far the only change I've had to make is substituting the redhat-gcs
references for mandrake/2.95.2 references in the makefiles in syscalls

any help or pointers would be greatly appreciated.

joey



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: build-apps trouble.

[Stephen Smalley]

If you only have 'spasswd' and 'newrole' in slinux/utils, then
you don't have a complete release.  You can either download
the one large archive with everything or you can individually
download the support files archives plus the individual
modified packages (as a patch or a complete archive).

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com



On Mon, 9 Apr 2001, Joey Mitchell Comeau wrote:

> I'm working through the installation of selinux and the build-apps tool is
> quitting with 
> stat*: no match. 
> 
> I looked in utils and there are no directories that start with stat, only
> spasswd and newrole


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[Howard Holm]

For those who want to contribute, I would personally suggest looking at
the future work list <http://www.nsa.gov/selinux/todo.html> for some
potentially interesting things to work on, and the papers in
<http://www.nsa.gov/selinux/docs.html> for design information.  I strongly
urge you, or anyone, who wants to work on something to keep the list
informed about what you are doing and your progress.  This will help
people with similar interests coordinate, avoid duplication of effort, and
potentially allow other developers to offer advice

--
Howard Holm <hdholm@epoch.ncsc.mil>
Information Assurance Research Office
National Security Agency

> To: selinux@tycho.nsa.gov
> Subject: Re: I would like to help. 
> Date: Mon, 09 Apr 2001 17:16:01 -0500
> From: Will Dye <willdye@dsndata.com>
> 
> Joey Mitchell Comeau writes:
> 
> > 	I'm a programmer, and I would like to help out with the
> > development of selinux. Could someone please point me to what would 
> > be a good place to start out, and what would be the most helpful to 
> > the effort at this time?
> 
> 
> 
> With the disclaimer that I haven't had the time to follow my own 
> advice here yet, I suggest taking a comprehensive look at...
> 
> 	http://www.nsa.gov/selinux/
> 
> ...with particular attention to the two background papers...
> 
> 	http://www.nsa.gov/selinux/background.html
> 
> ...plus the obvious stuff like the overview, FAQ, and docs.  I'd be 
> very interested in hearing if you find any other good sources.  Good 
> luck, and thanks for your offer to help.
> 
> 
> 
> --Will
> 
> _______________________________________________________________________
> William Dye - Interim Chief Executive Cat-Herder - The Tweakdom Project
> http://tweakdom.sourceforge.net - Never, ever speaking for my employers

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[bcarver2]

Howard,

I have ported Flask for Linux 2.4.2 version to the PowerPC
(an IBM 44P-270 POWER3 server, to be specific, although
the changes should be generic enough to run on any PowerPC
platform).  Where should I send the patches?

Howard Holm wrote:

> For those who want to contribute, I would personally suggest looking at
> the future work list <http://www.nsa.gov/selinux/todo.html> for some
> potentially interesting things to work on, and the papers in
> <http://www.nsa.gov/selinux/docs.html> for design information.  I strongly
> urge you, or anyone, who wants to work on something to keep the list
> informed about what you are doing and your progress.  This will help
> people with similar interests coordinate, avoid duplication of effort, and
> potentially allow other developers to offer advice
>
> --
> Howard Holm <hdholm@epoch.ncsc.mil>
> Information Assurance Research Office
> National Security Agency
>

--
Bob Carver

``Being politically correct means always having to say you're sorry.''
--Charles Osgood




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[Howard Holm]

I would suggest sending the patches to this list (a tarred gziped
attachment should work). That will ensure everyone has the ability to
review them and perhaps use them as a base for other work.  We'll see
them here as well and see what we can do about including them in a future
release.  Of course, it makes life easier for everyone if you make
sure that the code and your mail message makes clear that you are the
author and that you're releasing your changes under the GPL.

I would personally be interested in hearing about your experience
porting, (i.e., what you had to change and any problems you had) since
you're the first person I'm aware of to port selinux to another
architecture.  I'm sure other potential porters on the list might also
be interested.

> From: bcarver2@austin.ibm.com
> Date: Tue, 10 Apr 2001 15:21:45 -0500
> To: Howard Holm <hdholm@epoch.ncsc.mil>
> CC: selinux@tycho.nsa.gov
> Subject: Re: I would like to help.
> 
> Howard,
> 
> I have ported Flask for Linux 2.4.2 version to the PowerPC
> (an IBM 44P-270 POWER3 server, to be specific, although
> the changes should be generic enough to run on any PowerPC
> platform).  Where should I send the patches?
> 
> Howard Holm wrote:
> 
> > For those who want to contribute, I would personally suggest looking at
> > the future work list <http://www.nsa.gov/selinux/todo.html> for some
> > potentially interesting things to work on, and the papers in
> > <http://www.nsa.gov/selinux/docs.html> for design information.  I strongly
> > urge you, or anyone, who wants to work on something to keep the list
> > informed about what you are doing and your progress.  This will help
> > people with similar interests coordinate, avoid duplication of effort, and
> > potentially allow other developers to offer advice
> >
> > --
> > Howard Holm <hdholm@epoch.ncsc.mil>
> > Information Assurance Research Office
> > National Security Agency
> >
> 
> --
> Bob Carver
> 
> ``Being politically correct means always having to say you're sorry.''
> --Charles Osgood

--
Howard Holm <hdholm@epoch.ncsc.mil>
Information Assurance Research Office
National Security Agency

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: I would like to help.

[bcarver2]

[-- Attachment #1: Type: text/plain, Size: 2626 bytes --]

Howard,

The patch file is attached for PowerPC.  As the README says,
I am the author and I am releasing this under the GPL with
no warranties or guarantees of any kind!

First, the disclaimer: this stuff builds and runs in warning mode
on the machine I used to port it (an IBM 44P-270 server with
1.5 GB of RAM). I have not tested it extensively, however, so
there are no guarantees it will work for anyone else.  I don't have
time to do extensive testing at the present time.

The port went smoothly once SuSE released their 7.1 for PowerPC
about 10 days ago. That release uses the 2.4.2 kernel, so I didn't have
to deal with huge differences.  There were several times when the
build broke and I was able to pull in a fix from the SuSE tree and
fix it quickly.

There is one place in arch/ppc/kernel/process.c where
do_execve_secure() is called with some register parameters and
I had to just guess that it would work to use the next register.  I
left some comments in there (see BC:) because I thought for
sure that it would crash there.  Maybe it's not called in warning
mode?

Most of the changes were very straightforward.  Basically, I just
looked in the i386 architecture specific parts of the tree for
CONFIG_FLASK and made corresponding changes on the
ppc side.  The rest of the changes were identified when the
build broke.

I had a little trouble getting the utilities to build top-down, but
I was able to build each directory manually without many problems
(vixie-cron was the only utility I had to modify, I believe).

Howard Holm wrote:

> I would suggest sending the patches to this list (a tarred gziped
> attachment should work). That will ensure everyone has the ability to
> review them and perhaps use them as a base for other work.  We'll see
> them here as well and see what we can do about including them in a future
> release.  Of course, it makes life easier for everyone if you make
> sure that the code and your mail message makes clear that you are the
> author and that you're releasing your changes under the GPL.
>
> I would personally be interested in hearing about your experience
> porting, (i.e., what you had to change and any problems you had) since
> you're the first person I'm aware of to port selinux to another
> architecture.  I'm sure other potential porters on the list might also
> be interested.
>
> --
> Howard Holm <hdholm@epoch.ncsc.mil>
> Information Assurance Research Office
> National Security Agency

--
Bob Carver

``Being politically correct means always having to say you're sorry.''
--Charles Osgood



[-- Attachment #2: selinux-2.4.2-ppc.patch.tar.gz --]
[-- Type: application/octet-stream, Size: 56336 bytes --]

Re: I would like to help.

[Will Dye]

Howard Holm writes:

> I would suggest sending the patches to this list (a tarred gziped
> attachment should work). 


Quite a few people check their e-mail over a slow dialup line once 
in a while, including me.  Instead of broadcasting a potentially 
large file to an entire audience, please consider storing the file 
in an accessible location, and broadcasting only a pointer to the 
file.  

For storing the file, there are several options available.  For 
example, someone could set up a SourceForge project.  This would 
automatically include relatively convenient CVS storage, and 
several other services.  

Any volunteers to set up an FTP site?  Sourceforge project?  It 
would be best if the SELinux folks themselves ran it, but if no 
one else is available, I'll volunteer.  I'd rather set up a site 
from my fast link at work, than scroll through a zip attachment 
whenever I check e-mail from my slow link at home.


--Will


William L. Dye      | It's O.K. to be anal retentive, as long as all
Software Enginerd   | of the anuses that you retain are meticulously
willdye@willdye.com | sorted, arranged, categorized, & cross-indexed.



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.