1 |
2009/9/10 François Valenduc <francois.valenduc@××××××××××.be>: |
2 |
> Andrew John Hughes a écrit : |
3 |
>> 2009/9/5 François Valenduc <francois.valenduc@××××××××××.be>: |
4 |
>> |
5 |
>>> Magnus Granberg a écrit : |
6 |
>>> |
7 |
>>>> On Saturday 05 September 2009 12.17.00 François Valenduc wrote: |
8 |
>>>> |
9 |
>>>> |
10 |
>>>>> Hello everybody, |
11 |
>>>>> |
12 |
>>>>> I have recently swicth my SElinux install from ext3 to ext4 and after |
13 |
>>>>> having changed the rlpkq script to also relabel ext4 filesystems, I get |
14 |
>>>>> the following errors: |
15 |
>>>>> /usr/sbin/setfiles set context |
16 |
>>>>> /usr/sbin/setfilecon->system_u:object_r:bin_t failed:'Operation not |
17 |
>>>>> supported' |
18 |
>>>>> However, I have enabled Ext4 Security labels in the kernel configuration. |
19 |
>>>>> |
20 |
>>>>> Does anybody know a solution to this problem ? |
21 |
>>>>> Thanks in advance for your help. |
22 |
>>>>> |
23 |
>>>>> François Valenduc |
24 |
>>>>> |
25 |
>>>>> |
26 |
>>>> You need to update to policycoreutils-2.0.69 to get ext4 support. |
27 |
>>>> See bug #275369 http://bugs.gentoo.org/show_bug.cgi?id=275369 |
28 |
>>>> ------ |
29 |
>>>> Hardened-Development Overlay |
30 |
>>>> Magnus Granberg (Zorry) <zorry@×××.nu> |
31 |
>>>> |
32 |
>>>> |
33 |
>>>> |
34 |
>>>> |
35 |
>>> I have tried to upgrade policycoreutils to this version but it fails to |
36 |
>>> compile with this error: |
37 |
>>> |
38 |
>>> cc -Wl,-O1 semodule.o -lsepol -lselinux -lsemanage -L/usr/lib -o |
39 |
>>> semodulesemodule.o: In function `main': |
40 |
>>> semodule.c:(.text+0x803): undefined reference to |
41 |
>>> `semanage_module_upgrade_file' |
42 |
>>> semodule.c:(.text+0x84a): undefined reference to |
43 |
>>> `semanage_module_install_file' |
44 |
>>> semodule.c:(.text+0x8ae): undefined reference to |
45 |
>>> `semanage_module_install_base_file' |
46 |
>>> collect2: ld a retourné 1 code d'état d'exécution |
47 |
>>> make[1]: *** [semodule] Erreur 1 |
48 |
>>> make[1]: quittant le répertoire « |
49 |
>>> /var/tmp/portage/sys-apps/policycoreutils-2.0.69/work/policycoreutils-2.0.69/semodule |
50 |
>>> » |
51 |
>>> make: *** [all] Erreur 1 |
52 |
>>> make: quittant le répertoire « |
53 |
>>> /var/tmp/portage/sys-apps/policycoreutils-2.0.69/work/policycoreutils-2.0.69 |
54 |
>>> » |
55 |
>>> |
56 |
>>> |
57 |
>>> I have looked in gentoo bugzilla and I didn't find anything which seems |
58 |
>>> similar to this error. |
59 |
>>> |
60 |
>>> François Valenduc |
61 |
>>> |
62 |
>>> |
63 |
>>> |
64 |
>> |
65 |
>> |
66 |
>> Have you checked there aren't corresponding updates to libselinux, |
67 |
>> libsepol and libsemanage? This error suggests one or more of those |
68 |
>> libraries are out of date. |
69 |
>> |
70 |
> Indeed, upgrading libsepol, libsemanage and libselinux allowed |
71 |
> policycoreutils 2.0.69 to be compiled without error. However, it's still |
72 |
> impossible to relabel the filesystem. Now I don't see plenty of lines |
73 |
> indicating "Operation not supported" when I use rlpkg. But the files |
74 |
> remains unlabeled. Is it really possible to use ext4 and selinux ? |
75 |
> |
76 |
|
77 |
There must be some way, as Fedora 11 ships with both. |
78 |
How recent is your kernel? ext4 is still in development. |
79 |
|
80 |
> Thanks for your help. |
81 |
> |
82 |
> |
83 |
|
84 |
|
85 |
|
86 |
-- |
87 |
Andrew :-) |
88 |
|
89 |
Free Java Software Engineer |
90 |
Red Hat, Inc. (http://www.redhat.com) |
91 |
|
92 |
Support Free Java! |
93 |
Contribute to GNU Classpath and the OpenJDK |
94 |
http://www.gnu.org/software/classpath |
95 |
http://openjdk.java.net |
96 |
|
97 |
PGP Key: 94EFD9D8 (http://subkeys.pgp.net) |
98 |
Fingerprint: F8EF F1EA 401E 2E60 15FA 7927 142C 2591 94EF D9D8 |