[trustees] Re: Trustees: Could not register security component

[Andrew R. <ae...@ks...>]

Piotr Roszatycki wrote:
> I think you've done Bcc instead of Cc :)

Nah, I just typed that and totally forgot to CC the list at all so ended 
up just resending my e-mail to the list separately ;)

> BTW, I was maintaing the previous version of trustees. I would be glad to see 
> the new trustees in the distribution. I've got almost ready package which 
> provides module source and kernel patch but if someone is working on the 
> package, I could drop my work.

I'm not sure entirely how much work has been done towards a debian 
package, but I know that Nima has both a script that may be useful since 
it checks the trustees.conf a bit more thoroughly than the regular 
settrustees command does, and he also has some work done on a manpage.

I know he is a bit stalled right now as I am still working on getting 
some rather large changes into subversion and I have neglected to answer 
a few questions he has had to completely finish the manpage.

> Ouch...
> 
> So it would be a tricky as far as the capabilities module is loaded in the 
> initrd image.

That could really be a showstopper towards a debian package, as I was 
rather sure that some of the new debian/ubuntu stuff (hald perhaps) was 
always checking that the capabilities module was loaded at start.

Perhaps the debian kernel patch package will require the stacking 
patches as well and a modified trustees to work with it?  ( I don't 
believe it will take much work at all to get trustees to work with the 
stacking stuff since it does not use the security fields on various 
filesystem objects )

- Andy