Re: [gentoo-hardened] selinux newbie questions / avc denies everything

[Thomas Eschenbacher]

Chris PeBenito wrote:
> [...]
> Unfortunately this is your problem:
>
>>kernel "2.6.14-hardened-r5",
>>XFS as root filesystem
>
> please see: http://marc.theaimsgroup.com/?l=gentoo-hardened&m=113433863728029&w=2
>
> XFS should be fixed in 2.6.16.

Thanks for your quick reply!
So it seems that I have the following options:

A) wait some weeks (or months?) until 2.6.16-hardened is out, run in
permissive mode meanwhile.

B) take the sources of kernel 2.6.16-rc6, apply the SELinux patch
against it and replace the "fs/xfs" directory of my old
2.6.14-hardened-r5 source tree with the one from the new version. Will
this "backport" work, is this compatible?

C) switch to a different filesystem. My only options seem to be:
   1. ext2/ext3 -> I hate running e2fsck, no options.
   2. reiserfs -> officially unsupported for SELinux
   3. XFS -> obviously doesn't work in this version
   4. JFS -> any experience?

Any suggestions or other alternatives?

Thomas
-- 
gentoo-hardened@g.o mailing list