Re: Moving target -- kernel version.

[Luke Kenneth Casson Leighton <lkcl@xxxxxxxx>]

roger, hi,

you will find, if you download the latest
2.6.11 debian kernel, and headers (apt-get install
kernel-image-2.6.11-1-686 kernel-headers-2.6.11-1-6-6) and
examine /usr/src/kernel-headers-2.6.11-1-686/.config,
that CONFIG_SECURITY_SELINUX is set to "y".

also you will find that CONFIG_TMPFS_SECURITY, CONFIG_EXT2_FS_SECURITY,
CONFIG_EXT3_FS_SECURITY are all also set to "y".

so you will not _need_ to build a new debian 2.6.11 kernel.

at least, i don't recall seeing any significant messages go
by that have said "you must upgrade to 2.6.12 because of x to
use the latest sf.net cvs policy files".

l.


On Tue, May 24, 2005 at 05:35:01AM -0700, Roger Brunell wrote:
> I am starting to feel a rising wave of frustration with producing a
> reproducible script for installing selinux.
> 
> To do the install the kernel must be patched and rebuild.
> To patch and build the source must be present
> But which source???
>   ? apt-get kernel-source-2.6.11     (version = 2.6.11-3)
>   ? Distro version is not documented
>      ? Kernel.org patches applied not documented
>      ? Distro patches applied -- not documented
>   ? /nsa/linux-2.6/    is what? Virgin kernel.org sourec ??
>          nope, it changed since last CVS download a week ago (changes = 2168)
>   
> Right now I am diffing the /nsa/linux-2.6 and the apt-get kernel source.
> 
> Not sure what to do next for the best result.....
> 
> 
> 
>   
> 
> Roger Brunell
> 
> Infosec Engineer (retired)
> "Born 20 years too early"
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
> the words "unsubscribe selinux" without quotes as the message.

-- 
--
<a href="http://lkcl.net";>http://lkcl.net</a>
--

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.