Re: [gentoo-hardened] no /etc/security/selinux

[John Huttley]

I've just disovered that I'm getting an error emerging 
selinux-base-policy   post-install,

Inserting base module into strict module store.

libsemanage.semanage_install_active: Could not copy 
/etc/selinux/strict/modules/active/policy.kern to 
/etc/selinux/strict/policy/policy.21


not surprising since /etc/selinux/strict/modules/active/policy.kern  
does not exist.

I've tried booting a non-selinux kernel and get the same error.

--john

John Huttley wrote:
> Thanks to Petre and Krzysztof who pointed me to
>
> http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=3&chap=2
>
>
> However this isn't relevant.
> All of that page assumes that /etc/security/selinux is there.   It is not.
>
> the command semodule -B
>
> says  SELinux policy is not managed or store cannot be accessed.
>
> the profile is definately profiles/selinux/amd64/2006.1
>
>
> I have done an emerge -s policy   looking for something I have missed,
> but can't see anything.
>
> selinux-base-policy-20070329 is emerged and a epm -ql  does not show
> anything to do with /etc/security
>
>
> Any ideas?
>
> Regards,
>
> john
>
>> John Huttley wrote:
>>
>>> However I don't have a /etc/security/selinux   directory
>>> I have a   /etc/selinux  directory but there are no makefiles there.
>>>
>> You have emerged 20070329 policy ("managed policy")? If yes then it is OK. Check:
>> http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=3&chap=2
>> where you can find commands and short HOWTO for "managed policy".
>>
>>
>>
-- 
gentoo-hardened@g.o mailing list