| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
Comments:
<0> xident is not installed
<0> i never had ident installed
<0> er
<0> inetd
<1> lemme go grep
<0> ?
<1> in my refpolicy checkout for rules that might do that
<0> well at last sestatus is now showing the correct 'mode from config file'
<1> how many modules are you installing there?
<1> something's breaking it somewhere, so try cutting back to just the list i gave you
<1> once it links you can trivially add more in
<0> http://pengu.in/ross/semodule
<2> Hm. Where'd the freenode gentoo channel go?
<1> it's there
<1> and it's active
<2> I've got 3 users in mine. Did the place just split?
<1> what server are you on?
<2> Ah, there we go. Damn thing just unsplit
<0> spb: any idears? is it loading the module into the policy.conf ?
<0> and finding a TE already specified?
<1> hm
<1> it looks like somewhere you have the same TE rule twice
<1> but intuitively that shouldn't cause it to fail
<1> it does exit with an error, yes?
<0> libsepol.expand_terule_helper: duplicate TE rule for initrc_t insmod_exec_t:process insmod_t
<0> libsepol.expand_module: Error during expand
<0> libsemanage.semanage_expand_sandbox: Expand module failed
<0> That's everything
<1> echo $?
<0> 0
<1> sestatus ?
<1> return code of 0 should mean it succeeded
<3> User: sestatus -v Pasted http://pasteme.com/p.php?id=452
<1> what's in /etc/selinux/refpolicy/policy?
<0> there isn't any dir or file called /etc/selinux/refpolicy/policy
<1> hm
<1> what's in /etc/selinux/refpolicy then?
<0> "ls" /etc/selinux/refpolicy/
<0> contexts modules src
<1> bastard
<0> ?
<1> so it did fail then, but didn't return failure
<0> do i have it in the wrong dir?
<0> should it not be src/policy?
<1> it should link the policy modules together and then put the resulting binary in /etc/selinux/refpolicy/policy
<0> ah
<1> ok, the troubleshooting for that problem could get tedious i'm afraid
<1> i've never seen it before
<0> why teh **** would i just get it for no reason?
<4> same reason you got herpes
<4> no reason
<1> something's screwy in your policy sources i'm guessing
<0> HOW
<1> ***uming your toolchain is up to date
<0> when I downloaded it from the SVN?
<4> just BAM, one day you didn't use protection and the dirty whore had herpes
<0> yes the entire box works fine execpt for these ****ing policies
<5> you would think all selinux stuff would be in a img file that only 'selinux' could mount and r/w to
<1> bitrot: ok, start with semodule -b base.pp -i init.pp
<0> libsepol.print_missing_requirements: init's global requirements were not met: type/attribute home_type
<0> it's going to keep saying it needs other files
<1> add miscfiles
<0> i'm going to get to the same damn place I did LAST TIME
<1> no
<0> that's what I did to get to the point that i'm at now
<1> you're going to end up with the exact minimum you need
<0> miscfiles gives the same error
<0> semodule -b base.pp -i init.pp -i miscfiles.pp
<1> userdomain
<0> libsepol.print_missing_requirements: init's global requirements were not met: type/attribute home_type
<1> last time you had a bunch of stuff in there that you didn't need and that are very very rarely used
<1> so it wouldn't be overly surprising if they had something weird going on
<0> i hate my prompt
<0> i know i'm giong to end up in the same place dude
<0> becauset his is what I did already
<1> you mean you needed to add irc.pp before it would link?
<1> and ldap ?
<1> tftp?
<1> noone even uses tftp
<1> let alone its policy
<6> isn't tftp used to upgrade router firmware ?
<1> tftp is mainly used on a netboot server
<0> libsepol.print_missing_requirements: init's global requirements were not met: type/attribute lastlog_t
<6> hmm
<0> what is lastlog from?
<1> logger?
<0> i have logging.pp
<1> and miscfiles?
<0> yes
<0> semodule -b base.pp -i init.pp -i miscfiles.pp -i userdomain.pp -i selinuxutil.pp -i modutils.pp -i logging.pp -i libraries.pp \
<0> -i udev.pp -i logrotate.pp
<0> that's waht i have so far
<0> but it broke at udev
<0> logrotate didn't fix it
<1> authlogin?
<1> it won't be logrotate; remove that
<0> yaeh that worked ty
<0> libsepol.print_missing_requirements: authlogin's global requirements were not met: type/attribute scsi_generic_device_t
<0> :(
<1> storage
<0> libsepol.expand_terule_helper: duplicate TE rule for initrc_t insmod_exec_t:process insmod_t
<0> k
<0> back to square one again
<1> feck
<0> semodule -b base.pp -i init.pp -i miscfiles.pp -i userdomain.pp -i selinuxutil.pp -i modutils.pp -i logging.pp -i libraries.pp \
<0> -i udev.pp -i authlogin.pp -i storage.pp -i sysnetwork.pp -i locallogin.pp -i mta.pp
<7> i just intalled gentoo :PP (sorry for talking in this newbie-style way.. i am new to gentoo)
<0> it's mta
<0> and i know why lol
<0> I don't have a mta installed! :X
<0> would that make a difference?
<1> no
<0> GRR
<0> then why is it being stupid?
<0> you're telling me mta.pp is not commonly used?
<1> policy knows nothing about what's on your disk
<1> your policy is latest trunk, right?
<0> you're serious right?
<0> didn't we go over that before?
<0> i downloaded the one from svn i though.
<0> how much more latest can I get?
<0> no wait
<0> the refpolicy was from the tar i think :X
<1> datestamp on it?
<0> sep 4
<0> drwxrwxr-x 8 root root 4096 Sep 4 16:06 policy
<8> selinux is pooooooo
<0> yeah this is a big headache
<2> foxdonut: I'm typing from my new Gentoo install
<8> Two9A: :D
<1> datestamp on the tarball
<0> but i'm not sure how to secure teh box any other way
<1> not the files you extracted from it
<2> ALSA is being an arse
<0> the standard kernel doesn't ahve anything worth a damn
<0> drwxrwxr-x 8 root root 4096 Sep 4 16:06 policy
<0> woops
<1> foxdonut: selinux is great if you know what you're doing with it
<0> refpolicy-20060307.tar.bz2
<1> it just has a large learning curve
<1> holy **** that's old
<9> do i just unmerge old gcc's to get rid of them or is there special cleanup i need to do?
<0> lol
<0> k
<0> that's the problem then :(
<1> most likely
<0> yeah it be great if they could keep their **** together too spb
<1> works fine for me
<0> well
<1> but then i know how to check out svn :P
Return to
#gentoo
or
Go to some related
logs:
caused by seatbelts+ accident
#politics
#nhl
ImpLib32
#computers
#linux-noob
#computers
#politics
#politics
fartbrazil downloads
|
|