[ubuntu-hardened] SELinux Troubles

[Jeff Schroeder]

On Sat, Nov 22, 2008 at 2:12 AM, yossi ozani <yossiozani at gmail.com> wrote:
> Hi Jonathan.
>
> Check if the file /proc/cmdline has "selinux=1" if not add this to the file
> and then reboot(This add notify the kernel to activate  selinux).

You mean add selinux=1 to /boot/grub/menu.lst :)


>
> Regards
> Yossi
> BTW: You can use the command 'sestatus' to know the full status of SeLinux
> on your system
>
> On Sat, Nov 22, 2008 at 2:24 AM, Jonathan Marsden <jmarsden at fastmail.fm>
> wrote:
>>
>> Aaron Toponce wrote:
>>
>> > I would like to install SELinux on my systems, however, 'apt-get install
>> > selinux' seems to install an 'selinux-policy-dummy' package that doesn't
>> > actually install a working policy. Installing 'selinux-policy-default'
>> > seems to be what I'm after, but it conflicts with the 'selinux' package,
>> > and as such, removes everything I would think I want for a working
>> > SELinux installation.
>>
>> You don't mention what distribution of Ubuntu this is for, which is a
>> bit unfortunate.  Under Intrepid, installing the package selinux-basics
>> (via sudo apt-get install selinux-basics ) should work.  It's Depends:
>> and Recommends: lines are:
>>
>> Depends: checkpolicy, policycoreutils, selinux-utils, python
>> Recommends: setools, selinux-policy-refpolicy-targeted |
>> selinux-policy-refpolicy-strict | selinux-policy-default
>>
>> So this pulls in selinux-policy-default (because the other two
>> -refpolicy- ones do not seem to be in the repository) automatically...
>>
>> selinux-basics also includes a script called check-selinux-installation
>> which runs various tests to check on your selinux setup... sounds worth
>> a try in your circumstances.
>>
>> Perhaps you are using an older Ubuntu, and this issue has been fixed in
>> the current version?
>>
>> Jonathan
>>
>>
>>
>>
>> --
>> ubuntu-hardened mailing list
>> ubuntu-hardened at lists.ubuntu.com
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened
>
>
> --
> ubuntu-hardened mailing list
> ubuntu-hardened at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened
>
>



-- 
Jeff Schroeder

Don't drink and derive, alcohol and analysis don't mix.
http://www.digitalprognosis.com