SE Debian etc
I've been updating the packages on http://www.coker.com.au/selinux/ .
I've just put on a version of the 2002_01_15 lsm-full patch for kernel
2.4.18-pre9, it only needed a tiny change to match a change in the
put_superblock code.
I've uploaded a new version of my kernel-patch-2.5-lsm package to Debian with
support for kernel 2.5.3 and put it on my web site as I'm not sure if/when
it'll get into testing.
I've put a new version of the my flask package of core SE Linux utilities
online. This version diverts start-stop-daemon to use run_init to set the
security domain for daemons. Also I have been working on making the code
less intrusive to non-SE systems, run_init will not ask for a password if
running on a non-SE kernel.
I've packaged a SE patched version of shellutils which adds a SE capable
version of /usr/bin/id and a program "runas" to run a program in a different
security domain.
I've put a new version of my SE patched stat package online which will work
in the regular fashion on a non-SE kernel.
I've created a SE patched cron package.
So now I'm getting very close to having a working SE system (I think). I
think that all I need to do now is to spend a few days working on SE
configuration and I'll be able to run avc_toggle...
I got this done sooner than I had planned because I gave a work-in-progress
talk at linux.conf.au about SE Linux and needed more things to talk about.
Now I am considering submitting a talk for Ottawa Linux Symposium about my SE
Debian work. I think it will interest people to see a presentation about
hacking utilities and distribution scripts etc for SE support after they see
a talk from someone from the NSA about the design of SE Linux (I presume that
they will have a talk from an NSA employee again this year).
--
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/projects.html Projects I am working on
http://www.coker.com.au/~russell/ My home page
Reply to: