<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> Kees Cook wrote: <blockquote cite="mid:20080717201252.GG5794@outflux.net" type="cite"> <pre wrap="">On Wed, Jul 02, 2008 at 09:12:14PM -0700, Casey Schaufler wrote: </pre> <blockquote type="cite"> <pre wrap="">I have added the SmackConfiguration wiki page. </pre> </blockquote> <pre wrap=""> </pre> </blockquote> <tt> I am very sorry that I flaked out on today's meeting. Between getting ready for OLS and a new job it just fell out of my brain. </tt> <blockquote cite="mid:20080717201252.GG5794@outflux.net" type="cite"> <pre wrap="">This looks really great! Thanks. Some ideas would be to make it more specific to Ubuntu (i.e. instead of saying "2.6.25 and later", using "Intrepid and later"). </pre> </blockquote> <tt> OK, I will look into that. </tt> <blockquote cite="mid:20080717201252.GG5794@outflux.net" type="cite"> <pre wrap="">Beyond that, I see two things that need to be fixed: 1) Smack needs to be enabled in the kernel 2) smack-utils needs to be packaged for Ubuntu (and/or Debian) I've already asked Tim Gardner (kernel team) to turn on the config for Smack, so that should show up in the next Intrepid kernel. </pre> </blockquote> <tt> Just a heads up, you can't have both SELinux and Smack at the same time. The initialization logic will enable whichever gets loaded first (it will be SELinux, BTW) and refuse the second. </tt> <blockquote cite="mid:20080717201252.GG5794@outflux.net" type="cite"> <pre wrap="">Is anyone interested in doing some from-scratch packaging of smack-utils? </pre> </blockquote> <tt> I'll buy anyone who does this as many beers (or coffees) as they can drink in a day. </tt> <blockquote cite="mid:20080717201252.GG5794@outflux.net" type="cite"> <pre wrap="">Thanks, -Kees </pre> </blockquote> </body> </html>