[gentoo-hardened] Oh no - i cant obtain default SID'a for user ....

[gentoo-hardened] Oh no - i cant obtain default SID'a for user ....

[Bartosz Gorzynski]

I ugrade selinux kernel sources to new version, selinux-base and
util-linux,procps  and get message similiar to above when i log to console
( no posibility to log over ssh)

Please help

Bartosz Gorzynski
System Administrator
email: bartoszg@jeremi.pl
JEREMI s.c
Rynek Staromiejski 33
87-100 Torun
fax (056) 654 61 30


--
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] Oh no - i cant obtain default SID'a for user ....

[Chris PeBenito]

[-- Attachment #1: Type: text/plain, Size: 924 bytes --]

Have you relabeled?  Most likely there are programs not running the the
correct context, so they can't obtain SIDs.  Hopefully we'll be able to
get the selinux support into portage soon, so you wont have to relabel
every time you install a package.  The rlpkg command will relabel a
portage package, ex: rlpkg util-linux   You'll probably have to log in
single user mode to get in, add a single s to your kernel command line.

On Mon, 2003-07-14 at 04:34, Bartosz Gorzynski wrote:
> I ugrade selinux kernel sources to new version, selinux-base and
> util-linux,procps  and get message similiar to above when i log to console
> ( no posibility to log over ssh)
> 
> Please help
-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer, SELinux
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

[gentoo-hardened] Clean system install problems: gettext-0.12

[Neil Katin]

I tried doing a clean install of gentoo-hardened, as described in
http://www.gentoo.org/proj/en/hardened/selinux-quickstart.xml

However, the emerge of hardened-sources failed, due to the
(normally masked) package sys-devel/gettext-0.12.  Its not quite
the fault of the hardened package; it failed when just doing
an "emerge -u system" with ACCEPT_KEYWORDS of ~x86.

As a workaround, I went back to only stable packages, did
an "emerge -u system", added bakc the ACCEPT_KEYWORDS to
unstable packages, and then merged hardened-sources.
Gettext-0.12 then successfully compiled.

I'm not sure what the proper "next step should be, whether
it is to patch the 0.12 package to build from a clean system,
or to change the install recommendations.

	Neil Katin


--
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] Clean system install problems: gettext-0.12

[Chris PeBenito]

[-- Attachment #1: Type: text/plain, Size: 761 bytes --]

I don't really understand exactly what the problem is.  But hopefully
all of the selinux-patched packages will get to x86 soon, so it won't be
required to run ~x86.  Off the top of my head, coreutils is holding up
the show.

On Mon, 2003-07-14 at 20:08, Neil Katin wrote:
> However, the emerge of hardened-sources failed, due to the
> (normally masked) package sys-devel/gettext-0.12.  Its not quite
> the fault of the hardened package; it failed when just doing
> an "emerge -u system" with ACCEPT_KEYWORDS of ~x86.
-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer, SELinux
Hardened Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]