[gentoo-dev] initrd

[Chris PeBenito <pebenito@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1085 bytes --]

For the new SELinux API in 2.6, it is required that the SELinux policy
is loaded by initrd.  We don't have a mkinitrd in portage.  I could add
a Gentoo-fixed RedHat mkinitrd, but I'd prefer not to, since all I have
to do in the initrd is 3 commands (and I don't want to maintain a
mkinitrd ebuild either).  However, there is a static shell in the RedHat
mkinitrd package (nash) that is compiled with dietlibc which I do want,
because its tiny, and made to run in a initrd.

Would it be acceptable to create something like a "mkpolicyinitrd"
package that pulls in the RH src rpm, and compiles nash out of it, and
adds in my own mkinitrd script?  I could also put the mkinitrd in our
selinux-base-policy ebuild, and just create a nash ebuild.

I would rather have a ebuild just for nash.  Is there any preference, or
other suggestions?

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer, SELinux
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]