Menu
▾
▴
trustees-general
|
From: Andrew R. <ae...@ks...> - 2005-08-12 14:40:21
|
Piotr Roszatycki wrote: > I'm trying to do `insmod trustees.ko' on clean Debian system with > linux-image-2.6.12-1 package and I'm getting > > Trustees: Could not register security component > > from system :( > > Do you know what is going on? > > I would like to maintain the trustees package for Debian and provide the > source package for module which could work with the default kernel... I'm carbon-copying this to the mailing list since I think perhaps Nima was also working on debian-related things. (Including a man page). More than likely this means you have another security module loaded or compiled into the kernel. Capabilities? Selinux? Until the stacking patches make it into mainline and trustees is ported to use that API, only one security module is able to be used at a time. - Andy |
|
From: Andrew R. <ae...@ks...> - 2005-08-12 15:12:17
|
Piotr Roszatycki wrote: > I think you've done Bcc instead of Cc :) Nah, I just typed that and totally forgot to CC the list at all so ended up just resending my e-mail to the list separately ;) > BTW, I was maintaing the previous version of trustees. I would be glad to see > the new trustees in the distribution. I've got almost ready package which > provides module source and kernel patch but if someone is working on the > package, I could drop my work. I'm not sure entirely how much work has been done towards a debian package, but I know that Nima has both a script that may be useful since it checks the trustees.conf a bit more thoroughly than the regular settrustees command does, and he also has some work done on a manpage. I know he is a bit stalled right now as I am still working on getting some rather large changes into subversion and I have neglected to answer a few questions he has had to completely finish the manpage. > Ouch... > > So it would be a tricky as far as the capabilities module is loaded in the > initrd image. That could really be a showstopper towards a debian package, as I was rather sure that some of the new debian/ubuntu stuff (hald perhaps) was always checking that the capabilities module was loaded at start. Perhaps the debian kernel patch package will require the stacking patches as well and a modified trustees to work with it? ( I don't believe it will take much work at all to get trustees to work with the stacking stuff since it does not use the security fields on various filesystem objects ) - Andy |
|
From: Piotr R. <Pio...@ne...> - 2005-08-12 15:23:35
|
On Friday 12 of August 2005 17:12, Andrew Ruder wrote: > > Ouch... > > > > So it would be a tricky as far as the capabilities module is loaded in > > the initrd image. > > That could really be a showstopper towards a debian package, as I was > rather sure that some of the new debian/ubuntu stuff (hald perhaps) was > always checking that the capabilities module was loaded at start. Many of Debian packages are linked against libcap1 and AFAIK some daemons won't even start if the kernel is missing the capabilities system. -- .''`. Piotr Roszatycki, Netia SA : :' : mailto:Pio...@ne... `. `' mailto:de...@de... `- |
Thanks for helping keep SourceForge clean.
X