On Thu, 2002-01-24 at 13:58, Stephen Smalley wrote:
>
> On 24 Jan 2002, Timothy Wood wrote:
>
> > Cannot send dump request: Connection refused
>
> Did you enable Netlink support when you configured the kernel?
> What release of SELinux are you using?

Yes. 2001121010 (according to the tarball)

>
> > module and by building it straight into the kernel. Which brings me to
> > the module problem. Dmesg shows that it finds the nic but I never see
> > the module as being loaded when I run lsmod and when I try to insmod it
> > I get an error saying that it can't locate the card on the console and
> > avc errors in the system log.
>
> If you build the module into the kernel, it won't show up in lsmod.
> What AVC errors are being logged? Did you run insmod after logging
> into the sysadm_r role? Also, is your kernel in permissive mode or
> enforcing mode?

I realise that. I merely brought it up in regards to the time when the network was built as a module.

kernel: avc: denied { read } for pid=268 exe=/sbin/insmod path=/etc/modules.conf.vm dev=08:01 ino=213709 scontext=system-U:system_r:kmod_t
tcontext=system_u:object_r:etc_runtime_t tclass=lnk_file

that is one of the errors. if you want an entire boot log I can provide that. Yes I did try insmoding after I logged in as an administrator and thats when the I get the error telling me that it can't locate the card despite the fact that dmesg shows it was found during boot. I really don't think this is a problem the network driver as the loopback (lo) interface is never raised either. The dump request thing looks like the root of the problem since it occurs if I try to raise either the eth0 or lo interfaces. The system boots into permissive mode and I usually leave it there.

>
> > I'm also running this on ext3 if that might have something to do with it
> > since I know ext3 isn't properly supported yet. Anyhow, any ideas are
> > welcome and I can reload this machine if the need arises. Thanks.
>
> ext3 works fine. It was only an issue when ext3 support wasn't in the
> mainstream kernel.

Ah, I see. Thanks for the clarification.

Timothy,

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



application/pgp-signature attachment: stored