Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-28 Thread Antoine Martin
> Instead, another possibility is the use of SELinux - I say that because > Antoine Martin some time ago has written a SELinux policy and possibly he's > going to share that, on request, after some tidyup (that's possibly needed). I intend to publish my policy files with some help and explanation

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-26 Thread Rob Landley
On Friday 25 November 2005 18:47, Blaisorblade wrote: > I talk about the SKAS patch on the host. You can use a host without it and > run a guest binary >= 2.6.13 in SKAS0 mode, which is as secure as SKAS3 and > fast enough (not as fast as SKAS3 though). And since it's fairly unlikely that your /tm

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-25 Thread Chris
Blaisorblade wrote: >On Saturday 26 November 2005 01:41, Chris wrote: > > >>>Let me think - you refer to the SKAS3 patch merged with grsec? >>> >>> > > > >>>You have a >>> >>>*) 2.6.12 (the bug could have been fixed) >>> >>> >>>*) with SKAS (it may be at fault) >>> >>> >>too inse

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-25 Thread Blaisorblade
On Saturday 26 November 2005 01:41, Chris wrote: > >Let me think - you refer to the SKAS3 patch merged with grsec? > >You have a > > > >*) 2.6.12 (the bug could have been fixed) > > > > > >*) with SKAS (it may be at fault) > > too insecure, so isn't really an option I talk about the SKAS patch on

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-25 Thread Chris
>Let me think - you refer to the SKAS3 patch merged with grsec? > > > No, i was not able to apply both, skas and grsec, so i used gentoo-sources-2.6.12-r10 patched with skas3, no grsec. >I looked into this time ago on request, after somebody posted a merge, but I >deadlocked on a problem for c

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-25 Thread Blaisorblade
Antoine, I'm CC:ing you about your UML SELinux policy - see below for context. On Friday 25 November 2005 13:12, Chris wrote: > Chris wrote: > >Blaisorblade wrote: > >>Yep, this crash wasn't described in your original mail, so please add all > >>details about the compilation environment, the host

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-25 Thread Chris
Chris wrote: >Blaisorblade wrote: > >>Yep, this crash wasn't described in your original mail, so please add all >>details about the compilation environment, the host kernel, the hardware and >>the scenario triggering the host crash (if any). >> >> >> >> >> > >here we go: > >Portage 2.0.51.

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-24 Thread Chris
Blaisorblade wrote: >On Thursday 24 November 2005 02:19, Blaisorblade wrote: > > >>On Wednesday 23 November 2005 22:07, Chris wrote: >> >>>kidding aside, i asked because i was wondering why the host crashed >>> >>> >>Ok, that's different - no matter which fscking compiler you use, the ho

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-23 Thread Blaisorblade
On Thursday 24 November 2005 02:19, Blaisorblade wrote: > On Wednesday 23 November 2005 22:07, Chris wrote: > > i guess, if it was "not intended to be stable", someone should slap all > > the devs with a big frozen troud *lol* > > > > kidding aside, i asked because i was wondering why the host cra

Re: [Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-23 Thread Blaisorblade
On Wednesday 23 November 2005 22:07, Chris wrote: > would explain everything, thx for your fast reply. > are there plans to test it on hardened? or any arguments why not? (just > curious). Just developer's time - Gcc thinks to be smarter than us on some more toolchains beyond hardened :-(. We're

[Fwd: Re: [uml-user] can't compile client >2.6.12]

2005-11-23 Thread Chris
oops, wrong button ;) Original Message Subject:Re: [uml-user] can't compile client >2.6.12 Date: Wed, 23 Nov 2005 21:54:32 +0100 From: Chris <[EMAIL PROTECTED]> To: Blaisorblade <[EMAIL PROTECTED]> Blaisorblade wrote: >On Wednesday 23 November 2005