List Info

Thread: selinux not enabled, no /etc/selinux/config




selinux not enabled, no /etc/selinux/config
country flaguser name
New Zealand
2007-04-01 16:52:28
Hi,
I'm a first timer and I've followed the documentation for
conversion, 
however I have series of issues.

1) After boot, sestatus says "disabled".  I have
to run "make reload". 
Then its enabled.
     sestatus then complains that "Mode from config
file: error (no 
such  file or directory)"

2) "man selinux"  says that /etc/selinux/config  
should exist. However 
it doesn't and the gentoo documentation page (selinux
handbook, 
installation) doesn't mention it, though there is a brief
mention in the 
HOWTO

3) The handbook says that after recompiling sysvinit, ldd
should show 
use of l/lib/libselinux.so.1. However, I've reemerged it and
it still 
doesn't. pam doesn't have the pam_selinux module either.

It is as if selinux was not in the use flags or something. 
My make 
profile is definitely set to selinux/2005.1/x86

Any advice greatfully received.

--John

emerge --info

Portage 2.1.2.2 (selinux/2005.1/x86, gcc-4.1.1,
glibc-2.5-r0, 
2.6.18-hardened-r6 i686)
============================================================
=====
System uname: 2.6.18-hardened-r6 i686 Intel(R) Pentium(R) D
CPU 2.66GHz
Gentoo Base System release 1.12.9
Timestamp of tree: Sun, 01 Apr 2007 15:00:07 +0000
ccache version 2.4 [enabled]
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r6
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3,
1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium2 -O2 -pipe
-mno-tls-direct-seg-refs -g"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /etc/postfix /etc/samba /etc/sasl2
/etc/squid 
/usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf
/etc/revdep-rebuild 
/etc/terminfo"
CXXFLAGS="-march=pentium2 -O2 -pipe
-mno-tls-direct-seg-refs -g"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks loadpolicy
metadata-transfer 
parallel-fetch sandbox selinux sesandbox sfperms
strict"
GENTOO_MIRRORS="http://distfiles.gentoo.o
rg 
http://distro.ibiblio.org/pub/linux/distributions/
gentoo"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links
--perms --times 
--compress --force --whole-file --delete --delete-after
--stats 
--timeout=180 --exclude=/distfiles --exclude=/local
--exclude=/packages 
--filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://192.168.95.254/gentoo-portage"
USE="X acpi apache crypt dbus dri gif gmp gpm gtk hal
jpeg nptl pam pcre 
pdf png readline sasl sse ssl tiff usb x86 xml xml2 xorg
zlib" 
ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare
dsnoop empty extplug 
file hooks iec958 ioplug ladspa lfloat linear meter mulaw
multi null 
plug rate route share shm softvol"
ELIBC="glibc" INPUT_DEVICES="keyboard 
mouse" KERNEL="linux"
LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 
lb216 lcdm001 mtxorb ncurses text"
USERLAND="GNU" VIDEO_CARDS="ati vesa
nv"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG,
LC_ALL, 
LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS,

PORTAGE_RSYNC_EXTRA_OPTS




-- 
gentoo-hardenedgentoo.org mailing list


Re: selinux not enabled, no /etc/selinux/config
country flaguser name
United States
2007-04-03 09:50:16
On Mon, 2007-04-02 at 09:52 +1200, John Huttley wrote:
> Hi,
> I'm a first timer and I've followed the documentation
for conversion, 
> however I have series of issues.
[...]
> It is as if selinux was not in the use flags or
something.  My make 
> profile is definitely set to selinux/2005.1/x86

Yes, that's because its not in your USE:

> USE="X acpi apache crypt dbus dri gif gmp gpm gtk
hal jpeg nptl pam pcre 
> pdf png readline sasl sse ssl tiff usb x86 xml xml2
xorg zlib" 

which means you probably have USE="-* ..." in your
make.conf.  There are
very few flags in the SELinux profiles, so you shouldn't
need to use -*.

-- 
Chris PeBenito
<pebenitogentoo.org>
Developer,
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&s
earch=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D
E6AF 9243
Re: selinux not enabled, no /etc/selinux/config
country flaguser name
New Zealand
2007-04-04 04:15:59
Aha! yes, I do have that, to stop promiscuous linking.

Thanks v much, I'll pick up on that next week.

Regards
John

Chris PeBenito wrote:
> On Mon, 2007-04-02 at 09:52 +1200, John Huttley wrote:
>   
>> Hi,
>> I'm a first timer and I've followed the
documentation for conversion, 
>> however I have series of issues.
>>     
> [...]
>   
>> It is as if selinux was not in the use flags or
something.  My make 
>> profile is definitely set to selinux/2005.1/x86
>>     
>
> Yes, that's because its not in your USE:
>
>   
>> USE="X acpi apache crypt dbus dri gif gmp gpm
gtk hal jpeg nptl pam pcre 
>> pdf png readline sasl sse ssl tiff usb x86 xml xml2
xorg zlib" 
>>     
>
> which means you probably have USE="-* ..." in
your make.conf.  There are
> very few flags in the SELinux profiles, so you
shouldn't need to use -*.
>
>   
-- 
gentoo-hardenedgentoo.org mailing list


[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )