Gentoo Archives: gentoo-hardened

From: Rumen Yotov <rumen@××××××.org>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Obtaining a Xen/SELinux/PaX/GRSecurity kernel
Date: Sun, 07 May 2006 18:14:03
Message-Id: 445E3819.3020300@qrypto.org
In Reply to: Re: [gentoo-hardened] Obtaining a Xen/SELinux/PaX/GRSecurity kernel by Kevin
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Kevin wrote:
5 > Chris PeBenito wrote:
6 >> On Sun, 2006-05-07 at 00:28 -0400, Kevin wrote:
7 >>> xen-sources (which patches the kernel for xen but not for
8 >>> SELinux/PaX/GRSecurity)
9 >>>
10 >>> or
11 >>>
12 >>> hardened-sources (which patches the kernel for SELinux/PaX/GRSecurity
13 >>> but not for xen)
14 >> Just so you know, SELinux is available in all 2.6 kernels, since it is
15 >> integrated upstream (i.e. its in vanilla sources).
16 >>
17 >
18 > Huh!
19 >
20 > I didn't realize that. Thanks for pointing it out.
21 >
22 > Strangely, make menuconfig in a freshly installed xen-sources tree
23 > doesn't show me any SELinux configuration options, so I just assumed
24 > SELinux wasn't there, but after a make mrproper and make menuconfig, I
25 > do now see the SELinux configuration options. But perhaps even more
26 > strangely, now (after make mrproper), the XEN configuration options are
27 > gone from make menuconfig. What's going on here?
28 >
29 > -Kevin
30 >
31 Hi,
32 Think that Xen is hiding all other options, leaving only those that work
33 with it (or the devs choose to leave as needed/appropriate).
34 Not very much experience with Xen though. This for a Xen core kernel.
35 HTH.Rumen
36 -----BEGIN PGP SIGNATURE-----
37 Version: GnuPG v1.4.3-ecc0.1.6 (GNU/Linux)
38 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
39
40 iD8DBQFEXjgZNbtuTtsWD3wRAkP8AJwLinTvjYPnxhdG1PSMK85SMmZuSgCeLb8T
41 MxsJuRUb7ttZg4fuJgBoL18=
42 =iknG
43 -----END PGP SIGNATURE-----
44 --
45 gentoo-hardened@g.o mailing list