Gentoo Archives: gentoo-hardened

From: Jansson Fredrik <Fredrik.Jansson@×××××××××××.com>
To: Hardened Gentoo Mail List <gentoo-hardened@l.g.o>
Subject: RE: [gentoo-hardened] Big problems with installing hardened gentoo
Date: Tue, 15 Jun 2004 11:48:34
Message-Id: 939755D83C92514FA1914B53C405E1C702A858@ctserver4.hq.columbitech.com
1 Changing POLICYCOMPAT=15 to POLICYCOMPAT=17 in
2 /etc/security/selinux/src/policy/Makefile fixed it for me.
3
4 Why is this? Shouldn't the kernel be able to handle a lower version?
5
6 Best regards
7 Fredrik
8
9
10 -----Original Message-----
11 From: Jansson Fredrik [mailto:Fredrik.Jansson@×××××××××××.com]
12 Sent: den 15 juni 2004 12:45
13 To: Hardened Gentoo Mail List
14 Subject: [gentoo-hardened] Big problems with installing hardened gentoo
15
16 Hi!
17
18 I followed the instructions in:
19 http://www.gentoo.org/proj/en/hardened/selinux/selinux-x86-install.xml
20
21 Downloaded stage 1 from dev.gentoo.org/~pebenito.
22
23 Emerged hardened-dev-sources (with ACCEPT_KEYWORDS="~x86") and got
24 2.6.5-r3.
25
26 After following all instructions (the last thing that worked was make
27 chroot_relabel). I rebooted and tried to do make relabel but got the
28 error described in
29 http://www.gentoo.org/proj/en/hardened/selinux/selinux-faq.xml #12.
30
31 I have /selinux mounted and "make load" shows:
32 Make: Nothing to be done for 'load'.
33
34 I tried newrole -r sysadm_r and get the following message:
35 Sorry, newrole may be used only on a SELinux kernel.
36
37 dmesg | grep SELinux shows:
38 SELinux: Initializing
39 SELinux: Starting in permissive mode
40
41 I have tried all this (starting from scratch every time) three times and
42 always end up with the same result.
43 I am messing something up, but I can't figure it out..
44
45 Any help is greatly appreciated.
46
47 Best regards
48 Fredrik
49
50 --
51 gentoo-hardened@g.o mailing list
52
53
54 --
55 gentoo-hardened@g.o mailing list

Replies

Subject Author
RE: [gentoo-hardened] Big problems with installing hardened gentoo Chris PeBenito <pebenito@g.o>