Comments on: New SE Linux Policy for Lenny

By: matt

matt — Tue, 29 Jul 2008 20:48:15 +0000

etbe: Sorry for so long time with no response. I was running the latest policy packages. While running Ubuntu packages I have had the error mentioned by you, but i knew the solution so I’ve skipped the -M command – so the rumor may be true. I was running SELinux from curiosity, to play a little bit with it (i don’t host a server) and I’ve found this bug – but it was reported few days earlier.

By: etbe

etbe — Fri, 18 Jul 2008 23:44:49 +0000

matt: Are you running my latest policy packages? IE Did you edit /etc/selinux/config to refer to “default” and then reboot? For a while Unstable had a non-MCS policy which causes such issues. Also rumor has it that Ubuntu has a non-MCS policy which would cause problems if you used the Ubuntu policy. You could of course skip the -M on checkmodule.

By: matt

matt — Fri, 18 Jul 2008 20:15:13 +0000

Hello.
I’m using debian testing branch and have got all SELinux packages installed, but I get an error when running audit2allow command (reported not by me Bug#486120). To resolve the error listed above I’ve installed the python-sepolgen package from ubuntu hardy repos and when run audit2allow command, then checkmodule -M -m, semodule_package and then tried to load the module with semodule it gave me an error about linking a module with an non MLS database. Any help for that bug?

By: etbe

etbe — Mon, 14 Jul 2008 01:21:48 +0000

Tiago: I notice that you are involved with the Ubuntu project. What is the status of SE Linux in Ubuntu? I heard a rumor that they aren’t using MCS, is that true? I hope not.

By: Tiago

Tiago — Sun, 13 Jul 2008 12:54:42 +0000

Thank you for your posts. They are always the more informative and interesting. Keep it up!