Security Enhanced Linux
What's New
Frequently Asked Questions
Background
Documents
License
Download
Participating
Mail List
Archives
Remaining Work
Contributors
Related Work
Press Releases
Information Assurance Research
NIARL In-house Research Areas
Mathematical Sciences Program
Sabbaticals
Computer & Information Sciences Research
Technology Transfer
Advanced Computing
Advanced Mathematics
Communications & Networking
Information Processing
Microelectronics
Other Technologies
Technology Fact Sheets
Publications
Related Links
|
SELinux Mailing List
subject: Re: Problems finding working kernel/user land combination Date: Tue, 06 Apr 2004 16:59:37 -0700
I'm trying to follow the trail for installing SELinux on Debian unstable, as helpfully documented by Dave Gilbert (see below). Thanks, Dave! However, I'm having difficulty with the Selinux-policy-default package, which Dselect complains is not compatible with Policycoreutils. I plan to start over with a very minimal Debian installation on the hypothesis that one or more of the SELinux package versions has been obsoleted by a non-SELinux package. Can anyone offer other suggestions for installing SELinux under Debian, whether stable or unstable? Cheers, --On Tuesday, February 03, 2004 7:12 PM +0000 "Dave Gilbert (Home)" <gilbertd@treblig.org> wrote:
> So - to summarise (for those reading this in the future - is the archive Bill McCarty, Ph.D. Professor of Information Technology Azusa Pacific University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Tom <tom_at_lemuria.org> subject: Re: Problems finding working kernel/user land combination Date: Wed, 7 Apr 2004 07:54:06 +0200
Those are for woody, not unstable. Look at my site for apt sources for the other distros (http://selinux.lemuria.org) -- http://web.lemuria.org/pubkey.html pub 1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org> Key fingerprint = C731 64D1 4BCF 4C20 48A4 29B2 BF01 9FA1 2D7A 04F5 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Bill McCarty <bmccarty_at_pt-net.net> subject: Re: Problems finding working kernel/user land combination Date: Wed, 07 Apr 2004 00:05:47 -0700
Tausend Dank! --On Wednesday, April 07, 2004 7:54 AM +0200 Tom <tom@lemuria.org> wrote:
> Those are for woody, not unstable. Look at my site for apt sources for Bill McCarty, Ph.D. Professor of Information Technology Azusa Pacific University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Bill McCarty <bmccarty_at_pt-net.net> subject: Re: Problems finding working kernel/user land combination Date: Thu, 08 Apr 2004 22:23:19 -0700
--On Wednesday, April 07, 2004 7:54 AM +0200 Tom <tom@lemuria.org> wrote:
> Those are for woody, not unstable. Look at my site for apt sources for I ditched my not-quite-right Linux 2.4 installation of SELinux and had a go at at Linux 2.6 installation under Debian Sid, created by following Tom's excellent instructions at <http://selinux.lemuria.org/install-2.6.html>. However, I ran into a snag. Sid's SSH package has been updated to require libpam-runtime 0.76-14 or greater, and the latest libpam-runtime having SELinux mods is only 0.76-13. Although I was once familiar with Debian, I no longer know my way around it. Is there a way to instruct apt-get to ignore such a package dependency? I haven't been able to find an appropriate option in the man pages. I suppose that I could manually download the SSH package and install it via dpkg, which has a --force option. Is that the way to go? Cheers, Bill McCarty, Ph.D. Professor of Information Technology Azusa Pacific University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Tom <tom_at_lemuria.org> subject: Re: Problems finding working kernel/user land combination Date: Fri, 9 Apr 2004 15:59:18 +0200
Yes. Just to be sure I usually keep a full copy of the package archive locally (just the SE progs) and then do something like dpkg -i * after every upgrade. -- http://web.lemuria.org/pubkey.html pub 1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org> Key fingerprint = C731 64D1 4BCF 4C20 48A4 29B2 BF01 9FA1 2D7A 04F5 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Milan P. Stanic <mps_at_rns-nis.co.yu> subject: Re: Problems finding working kernel/user land combination Date: Fri, 9 Apr 2004 22:43:56 +0200
Maybe you could look at my backports from debian unstable to woody at http://www.rns-nis.co.yu/~mps/ or with apt: deb http://www.rns-nis.co.yu/~mps selinux/ I backported it with the help from Russell Coker, and tested it only under UML with 2.6.4 kernel. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Bill McCarty <bmccarty_at_pt-net.net> subject: Re: Problems finding working kernel/user land combination Date: Sat, 10 Apr 2004 20:38:29 -0700
--On Friday, April 09, 2004 10:43 PM +0200 "Milan P. Stanic" <mps@rns-nis.co.yu> wrote:
> Maybe you could look at my backports from debian unstable to woody I gave it a go; but dpkg reports that libselinux1 depends on libattr1 >= 2.4.4-1, which is not part of Woody. Did I take a wrong turn? Cheers, Bill McCarty, Ph.D. Professor of Information Technology Azusa Pacific University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Milan P. Stanic <mps_at_rns-nis.co.yu> subject: Re: Problems finding working kernel/user land combination Date: Sun, 11 Apr 2004 12:18:35 +0200
Oh, sorry. I forgot to note that it depends on libattr1 and attr which can be downloaded from http://www.backports.org/ In my original announce to debian-security I mentioned that, but here I made a mistake. Sorry for inconvenience. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Bill McCarty <bmccarty_at_pt-net.net> subject: Re: Problems finding working kernel/user land combination Date: Sun, 11 Apr 2004 23:02:52 -0700
--On Sunday, April 11, 2004 12:18 PM +0200 "Milan P. Stanic" <mps@rns-nis.co.yu> wrote:
> Oh, sorry. I forgot to note that it depends on libattr1 and attr which Ah, I see! I'll give that a try <g>. Thanks for the pointer. Cheers, Bill McCarty, Ph.D. Professor of Information Technology Azusa Pacific University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Peter Gervai <grin_at_tolna.net> subject: Re: Problems finding working kernel/user land combination Date: Wed, 7 Apr 2004 09:55:19 +0200
> However, I'm having difficulty with the Selinux-policy-default package, Use sid and add to apt/sources.list to the bottom: deb http://www.coker.com.au/newselinux ./ Check whether every essentials (ssh, login, pam) are selinux versions and not the plain ones. Sometimes they're a little behind, and debian standard versions rush in and "upgrade" 'em. :) Works here. Peter -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Bill McCarty <bmccarty_at_pt-net.net> subject: Re: Problems finding working kernel/user land combination Date: Wed, 07 Apr 2004 09:13:01 -0700
Cheers, --On Wednesday, April 07, 2004 9:55 AM +0200 Peter Gervai <grin@tolna.net> wrote:
> Use sid and add to apt/sources.list to the bottom: Bill McCarty, Ph.D. Professor of Information Technology Azusa Pacific University -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Koen Vervloesem <koen.vervloesem_at_student.kuleuven.ac.be> subject: Re: Problems finding working kernel/user land combination Date: Wed, 7 Apr 2004 21:36:31 +0200
I will be happy when you find a configuration that works. I have tried it and didn't succeed. Koen -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Tomas Hoger <thoger_at_pobox.sk> subject: Re: Problems finding working kernel/user land combination Date: Fri, 9 Apr 2004 17:53:28 +0200
If you put this:
Package: *
into /etc/apt/preferences, apt will keep Russell's packages and will never replace them with newer ones from main Debian archive (actually, if you already have newer version installed, apt will downgrade those packages to version available from Russell's repository ;). See 'man apt_preferences' for more info. th. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
|
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |