SELinux Mailing List - NSA/CSS

Skip All Menus Skip Top Menu

Top Navigation Menus

Skip Research Menus

Research Menu

Research Security Enhanced Linux What's New Frequently Asked Questions Background Documents License Download Participating Mail List Archives Remaining Work Contributors Related Work Press Releases Information Assurance Research NIARL In-house Research Areas Mathematical Sciences Program Sabbaticals Computer & Information Sciences Research Technology Transfer Advanced Computing Advanced Mathematics Communications & Networking Information Processing Microelectronics Other Technologies Technology Fact Sheets Publications Related Links	Skip Search Box Searchbox SELinux Mailing List Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] From: Hubertus Franke <frankeh_at_us.ibm.com> subject: (no subject) Date: Fri, 23 Mar 2001 18:02:08 -0500 This message: [ Message body ] Next message: Chris Crowther: "Re: your mail" Previous message: Stephen Smalley: "Re: Transition from RBAC to MLS" Next in thread: Chris Crowther: "Re: your mail" Reply: Chris Crowther: "Re: your mail" Reply: frenzy_at_frenzy.org: "Re: your mail" Reply: Stephen Smalley: "Re: your mail" just downloaded the SELinux for 2.4. I did the ./tools/build-kernel and get the following errors. /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: linux/flask/flask.h: No such file or directory /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: config/flask/audit.h: No such file or directory Looks like various files are missing in the distribution. Any ideas ? Hubertus Franke Enterprise Linux Group (Mgr), Linux Technology Center (Member Scalability) , OS-PIC (Chair) email: frankeh@us.ibm.com (w) 914-945-2003 (fax) 914-945-4425 TL: 862-2003 -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: Chris Crowther <shadow_at_shad0w.org> subject: Re: your mail Date: Fri, 23 Mar 2001 20:53:35 -0500 (EST) This message: [ Message body ] Next message: gawain.lynch_at_felicity-consulting.com.au: "Re: your mail" Previous message: Hubertus Franke: "(no subject)" In reply to: Hubertus Franke: "(no subject)" Next in thread: gawain.lynch_at_felicity-consulting.com.au: "Re: your mail" Maybe reply: gawain.lynch_at_felicity-consulting.com.au: "Re: your mail" Maybe reply: Hubertus Franke: "Re: your mail" Maybe reply: Stephen Smalley: "Re: your mail" On Fri, 23 Mar 2001, Hubertus Franke wrote: > /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: > linux/flask/flask.h: No such file or directory > /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: > config/flask/audit.h: No such file or directory > > Looks like various files are missing in the distribution. > Any ideas ? The header files get auto-created by the build, but they're not there when make dep is run, so you get all the errors, but the Kernel does compile. -- Chris "_Shad0w_" Crowther shad0w@shad0w.org http://www.shad0w.org.uk/ -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: gawain.lynch_at_felicity-consulting.com.au subject: Re: your mail Date: Sat, 24 Mar 2001 15:55:24 +1100 This message: [ Message body ] Next message: frenzy_at_frenzy.org: "Re: your mail" Previous message: Chris Crowther: "Re: your mail" Maybe in reply to: Chris Crowther: "Re: your mail" Next in thread: Hubertus Franke: "Re: your mail" > > /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: > > linux/flask/flask.h: No such file or directory > > /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: > > config/flask/audit.h: No such file or directory > > > > Looks like various files are missing in the distribution. > > Any ideas ? > The header files get auto-created by the build, but they're not > there when make dep is run, so you get all the errors, but the Kernel does > compile. I am having the same issue with the current release, I let tool/build-kernel run twice, but both times it exits with the error below: In file included from /usr/include/errno.h:36, from scripts/split-include.c:26: /usr/include/bits/errno.h:25: linux/errno.h: No such file or directory make: *** [scripts/split-include] Error 1 I have also tried patching fresh source here and I get the same issues. -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: Hubertus Franke <frankeh_at_us.ibm.com> subject: Re: your mail Date: Sat, 24 Mar 2001 13:51:12 -0500 This message: [ Message body ] Next message: Stephen Smalley: "Re: your mail" Previous message: Chris Crowther: "Slashdot Thread" Maybe in reply to: Chris Crowther: "Re: your mail" Next in thread: Stephen Smalley: "Re: your mail" That's not what the website said. I actually downloaded (a) the full version (b) the full 2.4.2 patched kernel (c) and the patch itself. All have the same problem. The trick with dobule compile didn't work for me. I do run on Redhat 7.0. Hubertus Franke Enterprise Linux Group (Mgr), Linux Technology Center (Member Scalability) , OS-PIC (Chair) email: frankeh@us.ibm.com (w) 914-945-2003 (fax) 914-945-4425 TL: 862-2003 "frenzy@frenzy.org" <mcclellr@OIT.EDU>@tycho.nsa.gov on 03/24/2001 02:26:49 AM Sent by: owner-selinux@tycho.nsa.gov To: cc: SELinux@tycho.nsa.gov Subject: Re: your mail It was my understanding that the kernel patch was only made for the supplied kernel that comes with RH6.1 I could be completely wrong here however. The last one I tried it with was 2.2.17-14smp, which also failed to compile. Sincerely, Randy McCleland-Bane http://www.frenzy.org -- Administrator MSN: drekbot@hotmail.com ICQ: 32276169 EM: frenzy@frenzy.org,mcclellr@oit.edu "We must be the change we wish to see in the world." - Mahatma Gandhi PGP key: http://www.frenzy.org/frenzy/ frenzy_at_frenzy.org.asc.txt On Fri, 23 Mar 2001, Hubertus Franke wrote: just downloaded the SELinux for 2.4. I did the ./tools/build-kernel and get the following errors. /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: linux/flask/flask.h: No such file or directory /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: config/flask/audit.h: No such file or directory Looks like various files are missing in the distribution. Any ideas ? Hubertus Franke Enterprise Linux Group (Mgr), Linux Technology Center (Member Scalability) , OS-PIC (Chair) email: frankeh@us.ibm.com (w) 914-945-2003 (fax) 914-945-4425 TL: 862-2003 -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: Stephen Smalley <sds_at_tislabs.com> subject: Re: your mail Date: Fri, 15 Mar 2002 10:31:04 -0500 (EST) This message: [ Message body ] Next message: Stephen Smalley: "Re: Updated Release" Previous message: Stephen Smalley: "Re: Updated Release" Maybe in reply to: Chris Crowther: "Re: your mail" Next in thread: frenzy_at_frenzy.org: "Re: your mail" On Fri, 15 Mar 2002, [iso-8859-1] Vanuxem grégory wrote: > I try to record the PSID directly in some attribute of inodes. Particularly > in xfs. > What do you think about that ? This has come up previously on the mailing list, so you might want to review the mailing list archives. A brief review: In the original SELinux kernel patch, we stored the PSID directly in a spare field of the on-disk ext2 inode. When SELinux was re-implemented to use the LSM kernel patch, the persistent label mapping was changed to maintain the inode-to-PSID mapping in a regular file rather than using a field in the inode since LSM does not provide any low-level filesystem-specific hooks. That change allows SELinux to support other filesystem types more easily, but has disadvantages in terms of performance and consistency. As support for extended attributes becomes mainstreamed, I'd like to see SELinux enhanced to optionally use them for persistent labeling when they are supported by the filesystem type. This seems reasonable for XFS (but see my earlier email regarding other issues with using XFS - http://marc.theaimsgroup.com/?l=selinux&m=101300861319394&w=2). Storing PSIDs via extended attributes is certainly one option. Another option would be to directly store file security contexts using extended attributes, completely eliminating the separate persistent label mapping. Regardless, you need to ensure that any changes you make don't prevent SELinux from continuing to work with filesystems that do not support EAs. > Another question, why the mapping inode->psid is always record in the file > ...security/inode. > For example, if I mount a file system that contained 50 differents types of > files (context),the SECFILES keep all the mapping. Now I have just three > types for the initialization, the root dir type, the fs type and the > "file_t" type but the avc keep the precedent mapping (50 psids and > contexts). I'm not sure what you are asking. The SELinux kernel module opens the mapping files and does an initial load of the PSID-to-context mapping at mount time. The incore cache for the PSID-to-context mapping is for performance. The inode-to-PSID mapping would be too large to keep incore. -- Stephen D. Smalley, NAI Labs ssmalley@nai.com -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: frenzy_at_frenzy.org subject: Re: your mail Date: Fri, 23 Mar 2001 23:26:49 -0800 (PST) This message: [ Message body ] Next message: Chris Crowther: "Slashdot Thread" Previous message: gawain.lynch_at_felicity-consulting.com.au: "Re: your mail" In reply to: Hubertus Franke: "(no subject)" Next in thread: Stephen Smalley: "Re: your mail" Reply: Stephen Smalley: "Re: your mail" It was my understanding that the kernel patch was only made for the supplied kernel that comes with RH6.1 I could be completely wrong here however. The last one I tried it with was 2.2.17-14smp, which also failed to compile. Sincerely, Randy McCleland-Bane http://www.frenzy.org -- Administrator MSN: drekbot@hotmail.com ICQ: 32276169 EM: frenzy@frenzy.org,mcclellr@oit.edu "We must be the change we wish to see in the world." - Mahatma Gandhi PGP key: http://www.frenzy.org/frenzy/ frenzy_at_frenzy.org.asc.txt On Fri, 23 Mar 2001, Hubertus Franke wrote: just downloaded the SELinux for 2.4. I did the ./tools/build-kernel and get the following errors. /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: linux/flask/flask.h: No such file or directory /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: config/flask/audit.h: No such file or directory Looks like various files are missing in the distribution. Any ideas ? Hubertus Franke Enterprise Linux Group (Mgr), Linux Technology Center (Member Scalability) , OS-PIC (Chair) email: frankeh@us.ibm.com (w) 914-945-2003 (fax) 914-945-4425 TL: 862-2003 -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: Stephen Smalley <sds_at_tislabs.com> subject: Re: your mail Date: Mon, 26 Mar 2001 09:01:39 -0500 (EST) This message: [ Message body ] Next message: Stephen Smalley: "Re: your mail" Previous message: Hubertus Franke: "Re: your mail" In reply to: frenzy_at_frenzy.org: "Re: your mail" Next in thread: Stephen Smalley: "Re: your mail" The kernel patch is based on the stock kernel sources from www.kernel.org or its mirrors. The current release provides patches for kernel versions 2.2.18 and 2.4.2, although the 2.2-based patch is no longer being actively developed. -- Stephen D. Smalley, NAI Labs sds@tislabs.com On Fri, 23 Mar 2001, frenzy@frenzy.org wrote: > It was my understanding that the kernel patch was only made for the > supplied kernel that comes with RH6.1 > I could be completely wrong here however. The last one I tried it with was > 2.2.17-14smp, which also failed to compile. > Sincerely, > > Randy McCleland-Bane > http://www.frenzy.org -- Administrator > MSN: drekbot@hotmail.com ICQ: 32276169 > EM: frenzy@frenzy.org,mcclellr@oit.edu > "We must be the change we wish to see > in the world." - Mahatma Gandhi > PGP key: http://www.frenzy.org/frenzy/ > frenzy_at_frenzy.org.asc.txt > > On Fri, 23 Mar 2001, Hubertus Franke wrote: > > just downloaded the SELinux for 2.4. > > I did the ./tools/build-kernel and get the following errors. > > > /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: > linux/flask/flask.h: No such file or directory > > > /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: > config/flask/audit.h: No such file or directory > > Looks like various files are missing in the distribution. > Any ideas ? > > > Hubertus Franke > Enterprise Linux Group (Mgr), Linux Technology Center (Member Scalability) > , OS-PIC (Chair) > email: frankeh@us.ibm.com > (w) 914-945-2003 (fax) 914-945-4425 TL: 862-2003 > > > > -- > You have received this message because you are subscribed to the selinux list. > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with > the words "unsubscribe selinux" without quotes as the message. > > > -- > You have received this message because you are subscribed to the selinux list. > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with > the words "unsubscribe selinux" without quotes as the message. > -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From: Stephen Smalley <sds_at_tislabs.com> subject: Re: your mail Date: Mon, 26 Mar 2001 08:57:44 -0500 (EST) This message: [ Message body ] Next message: Stephen Smalley: "Re: Transition from RBAC to MLS" Previous message: Stephen Smalley: "Re: your mail" In reply to: Hubertus Franke: "(no subject)" These header files should be automatically generated during the build. I just tried again with a clean copy of the release on my RedHat 6.1 system, and it built without any problems. Try expanding a clean copy of the release and building the kernel by hand rather than using the build-kernel script, i.e. tar xzf slinux-200103151617-release.tgz cd slinux ln -sf kernel-2.4 kernel cd kernel make xconfig or make menuconfig or make config (Configure the kernel appropriately.) make dep make make modules -- Stephen D. Smalley, NAI Labs sds@tislabs.com On Fri, 23 Mar 2001, Hubertus Franke wrote: > just downloaded the SELinux for 2.4. > > I did the ./tools/build-kernel and get the following errors. > > > /home/frankeh/slinux/kernel/include/linux/flask/avc.h:13:31: > linux/flask/flask.h: No such file or directory > > > /home/frankeh/slinux/kernel/include/linux/flask/security.h:49:32: > config/flask/audit.h: No such file or directory > > Looks like various files are missing in the distribution. > Any ideas ? > > > Hubertus Franke > Enterprise Linux Group (Mgr), Linux Technology Center (Member Scalability) > , OS-PIC (Chair) > email: frankeh@us.ibm.com > (w) 914-945-2003 (fax) 914-945-4425 TL: 862-2003 > > > > -- > You have received this message because you are subscribed to the selinux list. > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with > the words "unsubscribe selinux" without quotes as the message. > -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]
	Date Posted: Jan 15, 2009 \| Last Modified: Jan 15, 2009 \| Last Reviewed: Jan 15, 2009

bottom