Re: [trustees] problem with trustees...

[David R B. <db...@ls...>]

--On Thursday, September 22, 2005 10:00 AM -0500 Andrew Ruder 
<ae...@ks...> wrote:

> On Thu, Sep 22, 2005 at 01:30:48PM +0200, Konrad Smosna wrote:
>> I'm trying to use trustees on linux-2.6.13 and linux 2.6.13.2. I
>> compiled  and installed kernel and modules. Next I go to
>> /trustees-3.0/module/. I  issue two commands: "make" and "make install".
>> In directory
>> /lib/modules/2.6.13.2/extra I got trustees.ko. Until now everything is
>> OK,  but next I issue command "modprobe trustees" and i get :"FATAL:
>> Error  inserting trustees (/lib/modules/2.6.13.2/extra/trustees.ko):
>> Invalid  argument". I don't know what the problem is. I would be very
>> grateful for  help.
>> In attachment is my kernel-config.
>
> Konrad,
>
> Until the kernel supports security module stacking (and trustees is
> moved to using that), only one security module can be used at a time.
> Looking through your config, I noticed you had
> CONFIG_SECURITY_CAPABILITIES (the capabilities security module).  This,
> unfortunately, is enough to stop trustees from being able to load.

Has anyone tested Trustees with the existing lsm stacking patches (0.3+) 
and Capabilities?  Should it work, or are modifications needed in trustees?

Would it be possible to add the Capabilities functionality to the Trustees 
module so that stacking would not be necessary?

This is a showstopper for us using the new Trustees implementation right 
now.

Thanks.

-David