| 1 |
Hello Dale, |
| 2 |
|
| 3 |
Thursday, November 24, 2005, 1:43:39 AM, you wrote: |
| 4 |
|
| 5 |
DP> pedro wrote: |
| 6 |
|
| 7 |
>>Hello: |
| 8 |
>> |
| 9 |
>>I'm trying install gentoo selinux. I read the handbook: |
| 10 |
>>http://www.gentoo.org/proj/en/hardened/selinux/selinux-x86-handbook.xml |
| 11 |
>> |
| 12 |
>> |
| 13 |
>>and have a lot of problems. |
| 14 |
>> |
| 15 |
>> |
| 16 |
>> |
| 17 |
>>Errors: |
| 18 |
>> |
| 19 |
>>ERROR sys_kernel/hardened-sources-2.6.11-r15 failed |
| 20 |
>>function dyn_preinst, Line 1231 Exitcode 1 |
| 21 |
>>Failed to set SELinux Security Labels. |
| 22 |
>> |
| 23 |
>>ERROR sys_libs/readline-5.0-r2 failed |
| 24 |
>>function dyn_preinst, Line 1231 Exitcode 1 |
| 25 |
>>Failed to set SELinux Security Labels. |
| 26 |
>> |
| 27 |
>> |
| 28 |
>>What can I do. |
| 29 |
>> |
| 30 |
>> |
| 31 |
DP> Let's begin with the first question: |
| 32 |
|
| 33 |
DP> Which LiveCD did you use to do the install? |
| 34 |
DP> The one that's easy to find is "merely hardened," but doesn't have an |
| 35 |
DP> SELinux kernel. It sounds like that's the one you used, and actually you |
| 36 |
DP> should have first failed when you tried to mount the "selinux" |
| 37 |
DP> filesystem inside the chroot. But if you missed that, you'd next fail |
| 38 |
DP> when it came to set security labels. |
| 39 |
|
| 40 |
DP> I wish I could tell you exactly where the correct CD is, but I've |
| 41 |
DP> forgotten. I can just assure you that it is possible to browse the |
| 42 |
DP> mirror and find an SELinux LiveCD. One other problem with it... the |
| 43 |
DP> included kernel is too old for nptl. Therefore you can't bring the |
| 44 |
DP> system up from the ground with nptl, you have to convert after your |
| 45 |
DP> first boot. |
| 46 |
|
| 47 |
DP> Hope this helps, |
| 48 |
DP> Dale |
| 49 |
|
| 50 |
Today I had same problems. |
| 51 |
i've used livecd-x86-selinux-20040616-1.iso and stage3-x86-selinux-piessp-20050726.tar.bz2 |
| 52 |
Changing policycompat didn't help, because not only selinux versions was different, but policy on livecd and chrooted enviroment was different. |
| 53 |
Overwriting livecd policy with stage didn't help. |
| 54 |
I've solved it booting without selinux (at boot time choose "nose" or something like this), merge needed ebuilds, and after reboot relabel |
| 55 |
fs. |
| 56 |
-- |
| 57 |
Best regards, |
| 58 |
boger mailto:boger@×××.ru |
| 59 |
|
| 60 |
-- |
| 61 |
gentoo-hardened@g.o mailing list |
Archives