reiser3 + SELinux --- still no joy?

vbirf · n00b Joined: 05 Dec 2005 Posts: 2 Location: Moscow, Russia

there were some topics about this, but i need today's situation.

so...
i've got gentoo kernel (2.6.14).
i fixed script under /etc/security/selinux/src/policy to not skip reiserfs partitions.
i've even add user_xattrs to mounting params. (don't know is this really required...)
i've did make relabel. it said that everything allright, all files got relabeled...

but...
i just cannot add user by useradd. stracing shows that useradd fails to read security attributes on /etc/passwd...
make checklabels shows that many system files are continusly missing their sec attributes, so in logs i see many denials (permissive=1) ane so on.

what to do? does some work-inexpensive (by this i mean no multiple patching, no kernel hacking and not making other types of sex with computer) solution exist?

does anybody know about correct selinux support in reiser4?

codergeek42 · Posted: Mon Dec 05, 2005 6:55 am Post subject:

According to the SELinux x86 handbook:

Evil Dark Archon · Posted: Mon Dec 05, 2005 11:11 am Post subject:

Obvious question: did you make sure that security labels were enabled in your kernel config?
_________________
This post has been over explained for newb-informing purposes.

Registered Linux user 347334
Abit AV8-3rd eye, AMD Athlon64 3500+ 90nm, ATI Radeon x850 pro

vbirf · n00b Joined: 05 Dec 2005 Posts: 2 Location: Moscow, Russia

i said, that all files got relabeled, and ls -Z shows their security contexts, but some files under /etc loose labels

i think after r/w operations, but not only...

e.g. to change password i must do make relabel before passwd otherwise latter says error.

more, i mention i use standart gentoo kernel, so maybe reiser3+selinux fixing patches (discussed here too, a couple years ago, or so) still aren't included in it... but now i'm too lazy and too busy to investigate

anyway, i'm testing all this on my sandbox system, so i'll try (again) reiser4 soon

)