[gentoo-user] OT: SeAndroid build on a Gentoo System?

[gentoo-user] OT: SeAndroid build on a Gentoo System?

[James]

Hello,

Has anyone built or installed SE-android onto a Sumsung Nexus
(or similar) cell phone, using a Gentoo development environment?

http://www.linuxfordevices.com/c/a/News/SE-Android-publicly-released/?kc=LNXDEVNL012612

http://selinuxproject.org/page/SEAndroid

curiously,
James

Re: [gentoo-user] OT: SeAndroid build on a Gentoo System?

[Hinnerk van Bruinehsen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06.02.2012 17:25, James wrote:
> Hello,
> 
> Has anyone built or installed SE-android onto a Sumsung Nexus (or
> similar) cell phone, using a Gentoo development environment?
> 
> http://www.linuxfordevices.com/c/a/News/SE-Android-publicly-released/?kc=LNXDEVNL012612
>
>  http://selinuxproject.org/page/SEAndroid
> 
> curiously, James
> 
> 

I don't know, why it shouldn't work. At the moment I'm syncing the
repo, then I'll try it myself.

So long,
Hinnerk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPMS2aAAoJEJwwOFaNFkYctZsH/1rqTZO40vck58L9lvYoNyex
lIezpocXKINtG37Typ8fAGURzpBhmA0NXaa9yqn/aADbiquXbjYIrqlyRz92hCJS
YDXyrv6F7bVGspKNj+WIL8jtPepjEFGP9feFZm7xQ2cy1uJiXhmJvnvne9mTTlWO
FyHbzKam4N4aumnZAwriGEwUXakoKaOfy0h4bgtwczrQW6rJWzQj0GeKqmB1kgVj
eFCSktRx3cvUaMamTvQiVGA+Y4NEWZE8yVyZeIi0LnoB5BNL08t8Ny9Sny2Zady+
WX5+4zdgodpIOPSgTkeBZdoGnY8oqL2xLWvmt1Q8xAdlENUQTvkqXuDutpc8ky4=
=b0rb
-----END PGP SIGNATURE-----

[gentoo-user] Re: OT: SeAndroid build on a Gentoo System?

[James]

Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:


> > Has anyone built or installed SE-android onto a Sumsung Nexus (or
> > similar) cell phone, using a Gentoo development environment?

> I don't know, why it shouldn't work. At the moment I'm syncing the
> repo, then I'll try it myself.

Ah,
Great news. Which phone will you be writing to?

My small company is due some new cell phones, so
this looked interesting.


thanks,
James

Re: [gentoo-user] Re: OT: SeAndroid build on a Gentoo System?

[Hinnerk van Bruinehsen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08.02.2012 15:22, James wrote:
> Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:
> 
> 
>>> Has anyone built or installed SE-android onto a Sumsung Nexus
>>> (or similar) cell phone, using a Gentoo development
>>> environment?
> 
>> I don't know, why it shouldn't work. At the moment I'm syncing
>> the repo, then I'll try it myself.
> 
> Ah, Great news. Which phone will you be writing to?
> 
> My small company is due some new cell phones, so this looked
> interesting.
> 
> 
> thanks, James
> 
> 
I own a Galaxy Nexus - up to now I encountered a bug in finding the
tools.jar of JDK (Google helped here) and a problem due to the fact
that I use hardened for building (TEXTREL, I think). I'll try a stage
3 non hardened chroot later...



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPMojBAAoJEJwwOFaNFkYcvrEIAIKnpXPN7NRO48/hAw9ahvOu
JuNJLaJ+S31aO0fp9SrG1zHJhslvQU5q25/sE5dtlLSWUze/c9fbbp+HMLdNPqCP
ZpFj1ZrNnoJUHX9rT5DtqwlgM2W09MvsSUEXf32VewCRtcrkhQteTrERvvQ47h+k
geUmvFfMd14tgy8tIOYZjRfpRFkidU/0kMjZKYMnKsLYoiFG3tOqDcOXOZSSH1nU
/V3jex5q2pcRRNSwG4zqktDP+ihmJXbWZJ7e+yF4rpSMWabfqlEA1cmZ8g7MM/r8
gMZ7iE+1Q7w74iA/rM0P3dZf/tbLIyQfQpecECImnPaYQ2UL7qVaFMmquLvZkK8=
=bQBn
-----END PGP SIGNATURE-----

[gentoo-user] Re: OT: SeAndroid build on a Gentoo System?

[James]

Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:


> I own a Galaxy Nexus - up to now I encountered a bug in finding the
> tools.jar of JDK (Google helped here) and a problem due to the fact
> that I use hardened for building (TEXTREL, I think). I'll try a stage
> 3 non hardened chroot later...

How do you like the G. Nexus so far?
Who is your (cell) service provider?

I'm not sure I posted this link:
http://marc.info/?l=selinux&r=1&b=201201&w=4

Note. Russell Coker (dev for SElinux and SEandroid) is very cool and has 
his up and running on Debian (Wheezy). If you get stuck, you can search him out
for help. In my experiences with Russell, he is very friendly and
helpful, particularly on the last "thingy" he is focused on, like
SEandroid.....

thanks for keeping me posted,
James

Re: [gentoo-user] Re: OT: SeAndroid build on a Gentoo System?

[Hinnerk van Bruinehsen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08.02.2012 16:23, James wrote:
> Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:
> 
> 
>> I own a Galaxy Nexus - up to now I encountered a bug in finding
>> the tools.jar of JDK (Google helped here) and a problem due to
>> the fact that I use hardened for building (TEXTREL, I think).
>> I'll try a stage 3 non hardened chroot later...
> 
> How do you like the G. Nexus so far? Who is your (cell) service
> provider?
> 
> I'm not sure I posted this link: 
> http://marc.info/?l=selinux&r=1&b=201201&w=4
> 
> Note. Russell Coker (dev for SElinux and SEandroid) is very cool
> and has his up and running on Debian (Wheezy). If you get stuck,
> you can search him out for help. In my experiences with Russell, he
> is very friendly and helpful, particularly on the last "thingy" he
> is focused on, like SEandroid.....
> 
> thanks for keeping me posted, James
> 
It seems as if I'm not able to setup a proper build-environment with
hardened (due to chroot hardening the chroot isn't an option, either).
I'll try to find time to test it on a non-hardened host or in a vm
(which seems like a bad option, too, due to hardened restrictions).


If I get any further, I'll try to post some updates.

Concerning the phone: I'm very happy with it, as it is. It's a big
upgrade from my old Wildfire.
My cell service provider is Vodafone (Germany).

With kind regards,
Hinnerk

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPNNDQAAoJEJwwOFaNFkYcfdQIAI/xLQkTveIxvRuJw4BYelFr
nQ01IFPla+1mjMu30DWoW7dY4O++tdheRxhKKAz7jEA+e54g8mrxDaIs70bealiP
p0IMRp1OGtxW7hj/BABGk5Gab91iH6aq6BWi7eeEuw47W24UuYUHJHiJiD7GZMiY
/APTZxiaw82xLvfKJz3OEtC9Qiaruf9u4jRKP3GMRqpdG+8fSkX6zXvO1s8n45H3
gYaMyofIi/9KvC8qIhfrK+ODA+2xloyhV5d2lI5WIoMhgQ77KKC0TseRoGK8h9vC
68xJnmDnySLBm1RAMIJMFOJ8GIC97HNR/0TJFovo0bQSFBgZerAAFtUn2/aAjkM=
=Xupa
-----END PGP SIGNATURE-----

Re: [gentoo-user] Re: OT: SeAndroid build on a Gentoo System?

[Pandu Poluan]

[-- Attachment #1: Type: text/plain, Size: 1938 bytes --]

On Feb 10, 2012 3:13 PM, "Hinnerk van Bruinehsen" <
h.v.bruinehsen@fu-berlin.de> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 08.02.2012 16:23, James wrote:
> > Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:
> >
> >
> >> I own a Galaxy Nexus - up to now I encountered a bug in finding
> >> the tools.jar of JDK (Google helped here) and a problem due to
> >> the fact that I use hardened for building (TEXTREL, I think).
> >> I'll try a stage 3 non hardened chroot later...
> >
> > How do you like the G. Nexus so far? Who is your (cell) service
> > provider?
> >
> > I'm not sure I posted this link:
> > http://marc.info/?l=selinux&r=1&b=201201&w=4
> >
> > Note. Russell Coker (dev for SElinux and SEandroid) is very cool
> > and has his up and running on Debian (Wheezy). If you get stuck,
> > you can search him out for help. In my experiences with Russell, he
> > is very friendly and helpful, particularly on the last "thingy" he
> > is focused on, like SEandroid.....
> >
> > thanks for keeping me posted, James
> >
> It seems as if I'm not able to setup a proper build-environment with
> hardened (due to chroot hardening the chroot isn't an option, either).
> I'll try to find time to test it on a non-hardened host or in a vm
> (which seems like a bad option, too, due to hardened restrictions).
>
>
> If I get any further, I'll try to post some updates.
>
> Concerning the phone: I'm very happy with it, as it is. It's a big
> upgrade from my old Wildfire.
> My cell service provider is Vodafone (Germany).
>
> With kind regards,
> Hinnerk
>

There are grsec knobs in sysctl that you can temporarily disable to
"weaken" chroot for awhile. aW simple reboot will return these knobs to its
default secure settings.

(There's a thread I started when I have trouble doing things in a chroot,
and the solution was to temporarily stable done grkernelsec features before
going into chroot)

Rgds,

[-- Attachment #2: Type: text/html, Size: 2589 bytes --]

[gentoo-user] Re: OT: SeAndroid build on a Gentoo System?

[James]

Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:



> If I get any further, I'll try to post some updates.

Very cool!

thanks for the feedback.


James