Gentoo Archives: gentoo-hardened

From: shimi <shimi@×××××.net>
To: antoine <antoine@××××××××××.uk>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] selinux & udev
Date: Wed, 08 Jun 2005 21:58:02
Message-Id: 1118267904.16849.39.camel@matrix.shimi.net
In Reply to: Re: [gentoo-hardened] selinux & udev by antoine
1 On Wed, 2005-06-08 at 22:51 +0100, antoine wrote:
2 > > Anyways, the file's header begins like that:
3 > > # $Header: /var/cvsroot/gentoo-src/rc-scripts/etc/conf.d/rc,v 1.20.2.7
4 > > 2005/05/17 00:12:03 vapier Exp $
5 > Oh! Mine's from 02/2004!
6 > I'm a bit wary of running ~amd64 though, upgrading baselayout would do
7 > this:
8 > # ACCEPT_KEYWORDS="~amd64" emerge -pDtv baselayout
9 > These are the packages that I would merge, in reverse order:
10 > Calculating dependencies ...done!
11 > [ebuild U ] sys-apps/baselayout-1.11.12-r4 [1.9.4-r7] -bootstrap
12 > -build -debug -static -unicode 152 kB
13 > [ebuild U ] app-shells/bash-3.0-r11 [2.05b-r9] -bashlogger -build
14 > -debug +nls 2,404 kB
15 > [ebuild N ] sys-apps/sysvinit-2.86 -bootstrap -build +selinux 100
16 > kB
17 > [ebuild U ] sys-libs/readline-5.0-r2 [4.3-r5] 1,777 kB
18 >
19 > Do I really want to have sysvinit? I thought that baselayout blocked it?
20 > Or has this been fixed now in ~amd64?
21 >
22 I remember they were changing things there (something "X" is no longer
23 part of something "Y")... I don't know, it Just Worked (TM) for me...
24 > > As for your question, if you want udev, then yes, you should put udev
25 > > there. Mine is set to static because I had problems with software-RAID
26 > > (udev not creating my rootfs, kernel fails to load init, etc, etc.). If
27 > > udev doesn't do problems to you (and you actually need it - and with a
28 > > server - do you really need it?) - you can use it :)
29 > Thanks for mentioning this, I am using software raid for my root
30 > partition too! (it probably saved me a lot of hair)
31 >
32 > But since there is something mounted on there at the moment, how can I
33 > ensure that my /dev contains all the required devices nodes before I
34 > reboot?
35 > mount --bind /dev tmp
36 > ls -la tmp/md? shows them as present, I hope that's ok.
37 >
38 If udev is running, there's a good chance that you can't. mount --bind
39 is just like a hardlink to the directory, it's not really mounting
40 anything. If your /dev is on / (not a different partition), I think
41 you'll have to run without udev to check...
42 --
43
44 --
45 gentoo-hardened@g.o mailing list