From: Russell C. <ru...@co...> - 2003-01-27 18:58:31
|
On http://www.coker.com.au/uml/ I have put some patches for User Mode Linux and SE Linux. uml-patch-2.4.20-1um-djc.bz2 is the UML patch that I used. uml-se.patch is the patch for the code I wrote, it applies on a kernel that has the latest LSM patch and the UML patch applied. These patches do conflict a bit and one file has to be edited by hand. lsm-on-uml-2.4.20.patch.bz2 is the patch to apply on top of the UML patch for all LSM code and my code to make LSM and SE work. All my code does is patch the sys_exec_secure() system call. On Intel it uses a pt_regs structure so that the kernel code can fix up the registers for the new process. On UML this is not necessary so I have put the code in an arch-specific file and have separate versions for i386 and UML. Thanks to Jeff Dike for the advice. NB I have not yet tested whether my patch breaks SE Linux compilation for i386. ;) Using this I now have a machine setup for public use with SE Linux and UML. I'll give an account to anyone who's interested so that they can have a go at running their own SE Linux system. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page |