Re: getting started with SELinux

2003-11-29 Thread Dariush Pietrzak
On Sat, Nov 29, 2003 at 12:05:58AM +0100, Peter Busser wrote: > it works fine. Oho ho, what a bold claim. Not even adamantix people claim that. I found it not working correctly in few scenarios, although I must say security was improved. Adamantix is a very nice project, I like it alot, but it c

Re: getting started with SELinux

2003-11-29 Thread Dariush Pietrzak
On Sat, Nov 29, 2003 at 12:05:58AM +0100, Peter Busser wrote: > it works fine. Oho ho, what a bold claim. Not even adamantix people claim that. I found it not working correctly in few scenarios, although I must say security was improved. Adamantix is a very nice project, I like it alot, but it c

Re: getting started with SELinux

2003-11-29 Thread Russell Coker
On Sat, 29 Nov 2003 11:46, Forrest L Norvell <[EMAIL PROTECTED]> wrote: > > > un libselinux-dev(no description > > > available) ii libselinux1 1.2-1.1 SELinux > > > shared libraries un libselinux1-dev (no > > > description ava

Re: getting started with SELinux

2003-11-29 Thread Russell Coker
On Sat, 29 Nov 2003 11:46, Forrest L Norvell <[EMAIL PROTECTED]> wrote: > > > un libselinux-dev(no description > > > available) ii libselinux1 1.2-1.1 SELinux > > > shared libraries un libselinux1-dev (no > > > description ava

Re: getting started with SELinux

2003-11-28 Thread Forrest L Norvell
On Fri, Nov 28, 2003 at 11:40:12AM -0500, Colin Walters wrote: > On Fri, 2003-11-28 at 06:03, Forrest L Norvell wrote: > > Hi! > > > > I'm attempting to set up an SELinux system using the Debian packages > > and am unashamed to admit that I'm a little stuck at the moment. > > If you're planning t

Re: getting started with SELinux

2003-11-28 Thread Forrest L Norvell
On Fri, Nov 28, 2003 at 11:06:40PM +1100, Russell Coker wrote: > > 2. When I attempt to boot into my SELinux kernel (all packages, > > versions, and kernel configuration options at the end of this > > message), I get an error about being unable to find > > /usr/bin/load_policy, even wi

Re: getting started with SELinux

2003-11-28 Thread Forrest L Norvell
On Fri, Nov 28, 2003 at 11:40:12AM -0500, Colin Walters wrote: > On Fri, 2003-11-28 at 06:03, Forrest L Norvell wrote: > > Hi! > > > > I'm attempting to set up an SELinux system using the Debian packages > > and am unashamed to admit that I'm a little stuck at the moment. > > If you're planning t

Re: getting started with SELinux

2003-11-28 Thread Forrest L Norvell
On Fri, Nov 28, 2003 at 11:06:40PM +1100, Russell Coker wrote: > > 2. When I attempt to boot into my SELinux kernel (all packages, > > versions, and kernel configuration options at the end of this > > message), I get an error about being unable to find > > /usr/bin/load_policy, even wi

Re: getting started with SELinux

2003-11-28 Thread Peter Busser
Hi! On Sat, 29 Nov 2003 05:10, "Martin G.H. Minkler" <[EMAIL PROTECTED]> wrote: >> A little OT, but http://www.adamantix.org 's distro provides everything >> and more SELinux has to offer while IMHO being a little easier to handle. > Adamantix is not Debian. The people subscribed to this list are

Re: getting started with SELinux

2003-11-28 Thread Peter Busser
Hi! On Sat, 29 Nov 2003 05:10, "Martin G.H. Minkler" <[EMAIL PROTECTED]> wrote: >> A little OT, but http://www.adamantix.org 's distro provides everything >> and more SELinux has to offer while IMHO being a little easier to handle. > Adamantix is not Debian. The people subscribed to this list are

Re: getting started with SELinux

2003-11-28 Thread Russell Coker
On Sat, 29 Nov 2003 05:10, "Martin G.H. Minkler" <[EMAIL PROTECTED]> wrote: > A little OT, but http://www.adamantix.org 's distro provides everything > and more SELinux has to offer while IMHO being a little easier to handle. Adamantix is not Debian. The people subscribed to this list are here fo

Re: getting started with SELinux

2003-11-28 Thread Russell Coker
On Sat, 29 Nov 2003 05:10, "Martin G.H. Minkler" <[EMAIL PROTECTED]> wrote: > A little OT, but http://www.adamantix.org 's distro provides everything > and more SELinux has to offer while IMHO being a little easier to handle. Adamantix is not Debian. The people subscribed to this list are here fo

Re: getting started with SELinux

2003-11-28 Thread Martin G.H. Minkler
Alohá! A little OT, but http://www.adamantix.org 's distro provides everything and more SELinux has to offer while IMHO being a little easier to handle. Don't want to discourage anybody from SELinux, especially not with kernel 2.6 reaching production status, just my 2c ;-) best regards Mar

Re: getting started with SELinux

2003-11-28 Thread Martin G.H. Minkler
Alohá! A little OT, but http://www.adamantix.org 's distro provides everything and more SELinux has to offer while IMHO being a little easier to handle. Don't want to discourage anybody from SELinux, especially not with kernel 2.6 reaching production status, just my 2c ;-) best regards Martin

Re: getting started with SELinux

2003-11-28 Thread Colin Walters
On Fri, 2003-11-28 at 06:03, Forrest L Norvell wrote: > Hi! > > I'm attempting to set up an SELinux system using the Debian packages > and am unashamed to admit that I'm a little stuck at the moment. If you're planning to run a production system, I'd recommend starting from Debian woody and Brian

Re: getting started with SELinux

2003-11-28 Thread Colin Walters
On Fri, 2003-11-28 at 06:03, Forrest L Norvell wrote: > Hi! > > I'm attempting to set up an SELinux system using the Debian packages > and am unashamed to admit that I'm a little stuck at the moment. If you're planning to run a production system, I'd recommend starting from Debian woody and Brian

Re: getting started with SELinux

2003-11-28 Thread Russell Coker
On Fri, 28 Nov 2003 22:03, Forrest L Norvell <[EMAIL PROTECTED]> wrote: > /usr/bin/checkpolicy -o policy policy.conf > /usr/bin/checkpolicy: loading policy configuration from policy.conf > ERROR 'attribute file_type is not declared' at token ';' on line 867: > # > type device_t, file_type; > /usr/

Re: getting started with SELinux

2003-11-28 Thread Dale Amon
On Fri, Nov 28, 2003 at 03:03:08AM -0800, Forrest L Norvell wrote: > I know I'm not the first person to encounter this error, because I Yes, I'm working through some of these issues with Russell as we speak. There are errors in /etc/mkinitrd/scripts/selinux which builds the initrd file. Al

Re: getting started with SELinux

2003-11-28 Thread Russell Coker
On Fri, 28 Nov 2003 22:03, Forrest L Norvell <[EMAIL PROTECTED]> wrote: > /usr/bin/checkpolicy -o policy policy.conf > /usr/bin/checkpolicy: loading policy configuration from policy.conf > ERROR 'attribute file_type is not declared' at token ';' on line 867: > # > type device_t, file_type; > /usr/

Re: getting started with SELinux

2003-11-28 Thread Dale Amon
On Fri, Nov 28, 2003 at 03:03:08AM -0800, Forrest L Norvell wrote: > I know I'm not the first person to encounter this error, because I Yes, I'm working through some of these issues with Russell as we speak. There are errors in /etc/mkinitrd/scripts/selinux which builds the initrd file. Al