Skip top menus
National Security Agency and Central Security Service with agency logos.NSA/CSS Memorial Wall
Home    About NSA    Research    Business    Careers    Public Info    History
Introduction to Research    Security-Enhanced Linux    Information Assurance Research    Technology Transfer    Publications    Related Links

>>SELinux Mailing List: by thread

Search
What's new?
Contents
Overview
What's New
Frequently Asked Questions
Background
Documentation
License
Download
Participating
Mail List
Archive Summary
Archive by Thread
Archive by Author
Archive by Date
Archive by Subject
Remaining Work
Contributors
Related Work
Press Releases
  • Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]
From: Carl Carpenter <ccarpenter_at_hillcountry.org>
subject: Problems with eth0
Date: Wed, 10 Oct 2001 09:06:04 -0500
  • This message: [ Message body ]
  • Next message: Stephen Smalley: "Re: Problems with eth0"
  • Previous message: Stephen Smalley: "Re: Security policy analysis"
  • Next in thread: Stephen Smalley: "Re: Problems with eth0"
  • Reply: Stephen Smalley: "Re: Problems with eth0"
  • Reply: Julien Palardy: "Re: Problems with eth0"


I have discovered how SELinux provides such terrific security--it doesn't load the eth0 drivers, thereby keeping the server off the network. Seriously, I have a problem when running the SELinux kernel in that the eth0 module can't be found during bootup (modprobe: can't locate module eth0). I'm running 2.4.10-lsm on RH 7.1 (I386). It works fine in normal mode. I followed the install instructions step-for-step, selecting the preferred method of building the SELinux module as part of the kernel. If I got any error messages, I didn't see them with all the other messages on the screen. I'm fairly new to Linux, so this may be an easy fix, but it's beyond me at the moment. Thanks in advance for any help.

Carl Carpenter
IT Manager
Hill Country Community MHMR Center
"Hiroshima 1945, Chernobyl 1986, Windows 2000"

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.285 / Virus Database: 151 - Release Date: 10/5/2001



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
From: Stephen Smalley <sds_at_tislabs.com>
subject: Re: Problems with eth0
Date: Wed, 10 Oct 2001 10:22:29 -0400 (EDT)
  • This message: [ Message body ]
  • Next message: ipv6: "Re: Security policy analysis"
  • Previous message: Carl Carpenter: "Problems with eth0"
  • In reply to: Carl Carpenter: "Problems with eth0"
  • Next in thread: Julien Palardy: "Re: Problems with eth0"

On Wed, 10 Oct 2001, Carl Carpenter wrote:

> Seriously, I have a problem when running the SELinux kernel in that the eth0
> module can't be found during bootup (modprobe: can't locate module eth0).

You need to customize your kernel configuration for your hardware. The default kernel configuration (part of the mainstream linux kernel tree, not modified by LSM/SELinux) doesn't enable many network card drivers. You need to enable the driver for your network card under the Network device support menu.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
From: Julien Palardy <palj_at_praefect-sys.com>
subject: Re: Problems with eth0
Date: Wed, 10 Oct 2001 14:47:36 +0200
  • This message: [ Message body ]
  • Next message: Stephen Smalley: "Re: Security policy analysis"
  • Previous message: Julien Palardy: "Re: Security policy analysis"
  • In reply to: Carl Carpenter: "Problems with eth0"


I have been working on kernel-lsm with both SELinux patch and kernel module, and in both ways there does not seem to be any problem with the network interfaces.

Maybe you should take a look at your kernel config. May have missed a driver or something.

And yes, you do see good. SELinux provides terrific security ;)

---
Julien Palardy <palj@praefect-sys.com>
1AC7 1DB0 FEA6 93C2 6731  0AB1 07BA B3C7 458E E234



> I have discovered how SELinux provides such terrific security--it doesn't
> load the eth0 drivers, thereby keeping the server off the network.
> Seriously, I have a problem when running the SELinux kernel in that the
eth0
> module can't be found during bootup (modprobe: can't locate module eth0).
> I'm running 2.4.10-lsm on RH 7.1 (I386). It works fine in normal mode. I
> followed the install instructions step-for-step, selecting the preferred
> method of building the SELinux module as part of the kernel. If I got any
> error messages, I didn't see them with all the other messages on the
screen.
> I'm fairly new to Linux, so this may be an easy fix, but it's beyond me at
> the moment. Thanks in advance for any help.
>
> Carl Carpenter
> IT Manager
> Hill Country Community MHMR Center
> "Hiroshima 1945, Chernobyl 1986, Windows 2000"
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.285 / Virus Database: 151 - Release Date: 10/5/2001
>
>
>
> --
> You have received this message because you are subscribed to the selinux
list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
> the words "unsubscribe selinux" without quotes as the message.
-- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
  • Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT

Information Assurance | Signals & Intelligence        Links | Accessibility | Privacy & Security