[DSE-User] Installation of refpolicy-targeted modules fails

Unweitze Enweister unweitze.enweister at gmail.com
Sun Nov 11 09:45:36 UTC 2007


* Unweitze Enweister <unweitze.enweister at gmail.com> [2007-11-11 10:49:27 +0700]:

 
> This with ALL modules. What am I missing?
> 
Hmm.  Seems the policy package left the original policy in place over
several upgrades. apt-get remove --purge selinux-refpolicy-targeted and
apt-get install selinux-refpolicy-targeted fixed that, the install read
my more newly installed packages, and loaded what seems to be more
appropriate semodules during the process.

Problems noted so far:

I've built a HUGE ugly semodule called bootfix.pp and load it to get
around my current boot scheme of booting kernel and initramfs from
usbkey and decrypting my loop-aes disk partitions.  I need to break this
down and try to get to the one or two small tweaks that will make the
system tighter.  Built this from dmesg | audit2allow when booted to
single user in permissive mode.

hald didn't want to run, so I built a module haldfix.pp and load it to
let HAL initialize. Built this from dmesg | grep hald > haldfix.txt

Lastly, GDM can't start X (X catches signal 11 when started by GDM), so
I currently start X as normal user, and am not using GDM.

Any input out there?

Regards,

Unweitze
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/selinux-user/attachments/20071111/6a8f0768/attachment.pgp 


More information about the Selinux-user mailing list