From: David R B. <db...@ls...> - 2005-09-23 13:48:26
|
--On Thursday, September 22, 2005 10:00 AM -0500 Andrew Ruder <ae...@ks...> wrote: > On Thu, Sep 22, 2005 at 01:30:48PM +0200, Konrad Smosna wrote: >> I'm trying to use trustees on linux-2.6.13 and linux 2.6.13.2. I >> compiled and installed kernel and modules. Next I go to >> /trustees-3.0/module/. I issue two commands: "make" and "make install". >> In directory >> /lib/modules/2.6.13.2/extra I got trustees.ko. Until now everything is >> OK, but next I issue command "modprobe trustees" and i get :"FATAL: >> Error inserting trustees (/lib/modules/2.6.13.2/extra/trustees.ko): >> Invalid argument". I don't know what the problem is. I would be very >> grateful for help. >> In attachment is my kernel-config. > > Konrad, > > Until the kernel supports security module stacking (and trustees is > moved to using that), only one security module can be used at a time. > Looking through your config, I noticed you had > CONFIG_SECURITY_CAPABILITIES (the capabilities security module). This, > unfortunately, is enough to stop trustees from being able to load. Has anyone tested Trustees with the existing lsm stacking patches (0.3+) and Capabilities? Should it work, or are modifications needed in trustees? Would it be possible to add the Capabilities functionality to the Trustees module so that stacking would not be necessary? This is a showstopper for us using the new Trustees implementation right now. Thanks. -David |