Re: [gentoo-hardened] Re: SELinux Issues

[Tiago Lima]

Hi,

On Thursday 08 January 2004 04:30, Chris PeBenito wrote:
> Delete the devfsd.te and devfsd.fc, reload, relabel (devfsd at least).

What do you mean by "relabel (devfsd at least)" ?

> Since devfs doesn't work on the new API, I removed the policy for it.
> Unfortunately the config protection prevents it from being removed when
> the policy is updated.  I'll make a note of it in the changelog.

So for now just deleting the devfsd.te and devfsd.fc files and "make load" (or 
make reload ?) and make relabel (followed by a reboot ?) should work ?

Another thing, when we do :

	$ make install
	$ make initrd

it generates a initrd.gz file in the /boot directory, isnt it? How can I 
change the name of the file to be generated ?

Does the policy has anything to do with the kernel version / features ? For 
example if I use a newer kernel and an older policy it should work also ? And 
vice-versa ?

>
> On Wed, 2004-01-07 at 19:36, cmulcahy@×××××.com wrote:
> > There is might (likely) be a better solution.
> >
> > >> relabelto }; assertion on line 37285 violated by allow devfsd_t
> > >> etc_t:dir {

Thanks in advance, 
	Tiago Lima


--
gentoo-hardened@g.o mailing list