Gentoo Archives: gentoo-hardened

From: Chris PeBenito <pebenito@g.o>
To: Vladimir Berezniker <vmpn@×××××××××.com>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] [SELinux] broken policy and emerge filelabeling
Date: Fri, 17 Sep 2004 01:33:23
Message-Id: 1095384806.735.38.camel@gorn.pebenito.net
In Reply to: Re: [gentoo-hardened] [SELinux] broken policy and emerge filelabeling by Vladimir Berezniker
1 On Thu, 2004-09-16 at 21:00, Vladimir Berezniker wrote:
2 > However, I am still curious about asking emerge not to label files. The reason
3 > I ask is that once before, I managed to messup /etc/security/selinux. I could
4 > not get a policy to compile. I tried remerging base-policy, however it would
5 > not work due to labeling step failing. So I was curious if there was a way to
6 > ask emerge to skip the labeling step.
7
8 It runs if all are met:
9
10 1. USE=selinux
11 2. /selinux/context is available
12 3. /usr/sbin/setfiles is executable
13
14 if it comes down to it, you could `USE="-selinux" emerge
15 selinux-base-policy` without problem, just as long as you relabel
16 afterwords.
17
18 --
19 Chris PeBenito
20 <pebenito@g.o>
21 Developer,
22 Hardened Gentoo Linux
23 Embedded Gentoo Linux
24
25 Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
26 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243

Attachments

File name MIME type
signature.asc application/pgp-signature