Security Enhanced Linux
What's New
Frequently Asked Questions
Background
Documents
License
Download
Participating
Mail List
Archives
Remaining Work
Contributors
Related Work
Press Releases
Information Assurance Research
NIARL In-house Research Areas
Mathematical Sciences Program
Sabbaticals
Computer & Information Sciences Research
Technology Transfer
Advanced Computing
Advanced Mathematics
Communications & Networking
Information Processing
Microelectronics
Other Technologies
Technology Fact Sheets
Publications
Related Links
|
SELinux Mailing List
subject: initrd kernel panic Date: Wed, 16 Oct 2002 09:13:35 -0500
ss: loading policy configuration from <NULL> in looking at the security_init from init.c fp = fopen(policyfile, "r"); the policyfile is null. Is there a kernel parameter or something I am missing. the initrd has /etc/security/selinux/policy.11 (build from the make initrd-policy) and the initrd was labeled with types.fc Mark -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Stephen Smalley <sds_at_tislabs.com> subject: Re: initrd kernel panic Date: Wed, 16 Oct 2002 10:27:17 -0400 (EDT)
On Wed, 16 Oct 2002, Westerman, Mark wrote:
> When trying to use the initrd This was discussed earlier on the list (see http://marc.theaimsgroup.com/?l=selinux&m=103289179925418&w=2), and patches were posted and committed to the sourceforge CVS tree. It is no longer necessary to place a policy on an initrd at all. -- Stephen D. Smalley, NAI Labs ssmalley@nai.com -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Westerman, Mark <Mark.Westerman_at_csoconline.com> subject: RE: initrd kernel panic Date: Wed, 16 Oct 2002 09:28:49 -0500
> -----Original Message----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Westerman, Mark <Mark.Westerman_at_csoconline.com> subject: RE: initrd kernel panic Date: Wed, 16 Oct 2002 09:33:49 -0500
> -----Original Message----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Stephen Smalley <sds_at_tislabs.com> subject: RE: initrd kernel panic Date: Wed, 16 Oct 2002 10:44:47 -0400 (EDT)
On Wed, 16 Oct 2002, Westerman, Mark wrote:
> That should have been cvs check out on friday. I'd suggest double checking your working copy (do a 'cvs update -A') and making sure that you are booting the kernel you just built. The behavior you describe was specifically fixed by the patch, and the patch was committed to the head of the tree. -- Stephen D. Smalley, NAI Labs ssmalley@nai.com -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Westerman, Mark <Mark.Westerman_at_csoconline.com> subject: RE: initrd kernel panic Date: Wed, 16 Oct 2002 10:31:57 -0500
Does the initrd need to be labeled ?
> -----Original Message----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Stephen Smalley <sds_at_tislabs.com> subject: RE: initrd kernel panic Date: Wed, 16 Oct 2002 11:37:42 -0400 (EDT)
On Wed, 16 Oct 2002, Westerman, Mark wrote:
> Does the initrd need to be labeled ? No, but you'll need to add some permissions to the policy related to the initrd startup. -- Stephen D. Smalley, NAI Labs ssmalley@nai.com -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
|
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |