Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
SELinux on ppc?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Gentoo on PPC
View previous topic :: View next topic  
Author Message
orangeluna
n00b
n00b


Joined: 18 Nov 2008
Posts: 16

PostPosted: Mon Jul 20, 2009 2:13 am    Post subject: SELinux on ppc? Reply with quote

Hi guys. I wanted to install SELinux on my powermac the selinux handbook says to link make.profile to /pub/gentoo/releases/<arch>/current/stages/hardened/ but there is no powerpc arch for selinux. In the profiles though I do see a /hardened/linux/powerpc/ppc32 profile. Thing is I noticed it doesn't have selinux in FEATURES or and a few other things are different. I thought hardened was selinux but may not?? How do I get selinux on powerpc?
_________________
If we try real hard occasionally we can aspire to something that is less than pure evil.

--House
Back to top
View user's profile Send private message
JoseJX
Retired Dev
Retired Dev


Joined: 28 Apr 2002
Posts: 2774

PostPosted: Thu Jul 23, 2009 2:14 am    Post subject: Reply with quote

I'm sorry to say that the PowerPC team doesn't maintain the hardened profiles, that's the job of the hardened team. I suspect that getting SELINUX working on PPC is similar to other architectures, but I can't give you any details, sorry. I do know that it can be made to work though because I've used RHEL 5 on PowerPC with SELINUX enabled.
_________________
Gentoo PPC FAQ: http://www.gentoo.org/doc/en/gentoo-ppc-faq.xml
Back to top
View user's profile Send private message
orangeluna
n00b
n00b


Joined: 18 Nov 2008
Posts: 16

PostPosted: Thu Jul 23, 2009 2:44 am    Post subject: Reply with quote

Yeah, kinda figured, didn't know that ppc was supported though by selinux. Been looking into the x86 selinux profile and have adapted it to ppc, so I'm going to try and build it.
_________________
If we try real hard occasionally we can aspire to something that is less than pure evil.

--House
Back to top
View user's profile Send private message
orangeluna
n00b
n00b


Joined: 18 Nov 2008
Posts: 16

PostPosted: Thu Jul 23, 2009 2:54 pm    Post subject: Reply with quote

Looks like hardened has dropped support for SELinux. I looked at the hardened kernel config and there are no options for:

Code:
Security options  --->
   [*] NSA SELinux Support
   [ ]   NSA SELinux boot parameter
   [ ]   NSA SELinux runtime disable
   [*]   NSA SELinux Development Support
   [ ]   NSA SELinux AVC Statistics
   (1)   NSA SELinux checkreqprot default value
   [ ]   NSA SELinux enable new secmark network controls by default
   [ ]   NSA SELinux maximum supported policy format version


The SELinux profiles are from two years ago anyhow, so I'm not sure they would work. Guess I'm gonna have to do without.
_________________
If we try real hard occasionally we can aspire to something that is less than pure evil.

--House
Back to top
View user's profile Send private message
nixnut
Bodhisattva
Bodhisattva


Joined: 09 Apr 2004
Posts: 10974
Location: the dutch mountains

PostPosted: Thu Jul 23, 2009 4:19 pm    Post subject: Reply with quote

Hardened has dropped selinux support for ppc/ppc64 since the selinux guy doesn't have powerpc machines. But that has nothing to do with the kernel. If you can't enable selinux you're missing some other required options in your kernel config. Check the options after 'Depends on:' below
Code:

  │ Symbol: SECURITY_SELINUX [=n]                                           
  │ Prompt: NSA SELinux Support                                           
  │   Defined at security/selinux/Kconfig:1                                 
  │   Depends on: SECURITY_NETWORK && AUDIT && NET && INET                 
  │   Location:                                                           
  │     -> Security options                                               
  │   Selects: NETWORK_SECMARK

_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

talk is cheap. supply exceeds demand
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Gentoo on PPC All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum