selinux on JFS/ReiserFS
by Carlos Rodrigues
Hi!
I understand that SELinux is not supported by JFS and ReiserFS. I was
wondering if this is because these filesystems just can't handle it,
fedora's kernel is missing some patches that provide this functionality,
or the support is actually there but it doesn't work properly/nobody
trusts it?
Carlos Rodrigues
19 years, 5 months
rawhide report: 20041211 changes
by Build System
Updated Packages:
ghostscript-7.07-37
-------------------
* Fri Dec 10 2004 Tim Waugh <twaugh(a)redhat.com> 7.07-37
- Fixed missing return statement (bug #136757).
gimp-2:2.2-0.0.pre2.2
---------------------
* Fri Dec 10 2004 Nils Philippsen <nphilipp(a)redhat.com>
- use xsane plugin (un)install script if available
hal-0.4.2.cvs20041210-1
-----------------------
* Sun Dec 12 2004 David Zeuthen <davidz@redhat,com> 0.4.2.cvs20041210-1
- Snapshot from stable branch of upstream CVS
* Tue Oct 26 2004 David Zeuthen <davidz@redhat,com> 0.4.0-8
- Forgot to add some diffs in hal-0.4.0-pcmcia-net-support.patch
* Tue Oct 26 2004 David Zeuthen <davidz@redhat,com> 0.4.0-7
- Change default policy such that non-hotpluggable fixed disks are not
added to the /etc/fstab file because a) ATARAID detection in hal is
incomplete (e.g. RAID members from ATARAID controllers might be added
to /etc/fstab); and b) default install wont corrupt multiboot
systems on fixed drives (#137072)
hpoj-0.91-11
------------
* Fri Dec 10 2004 Tim Waugh <twaugh(a)rehdat.com> 0.91-11
- Ship CUPS backend in the right directory to avoid the need for a symbolic
link (bug #123589).
lvm2-2.00.30-1.0
----------------
* Fri Dec 10 2004 Alasdair Kergon <agk(a)redhat.com> - 2.00.30-1.0
- Additional debugging code.
- Some trivial man page corrections.
mtools-3.9.9-10
---------------
* Fri Dec 10 2004 Tim Waugh <twaugh(a)redhat.com> 3.9.9-10
- Fixed mpartition --help output (bug #65293).
net-snmp-5.2-1
--------------
* Tue Nov 30 2004 Radek Vokal <rvokal(a)redhat.com> 5.2-1
- net-snmp-5.2, patch clean-up
rpmdb-fedora-1:4-0.20041211
---------------------------
sane-backends-1.0.15-8
----------------------
* Fri Dec 10 2004 Tim Waugh <twaugh(a)redhat.com> 1.0.15-8
- Further small fixes to libusbscanner script.
* Fri Dec 03 2004 Tim Waugh <twaugh(a)redhat.com>
- Ship the correct libsane.usermap (part of bug #135802).
* Wed Dec 01 2004 Tim Waugh <twaugh(a)redhat.com>
- No longer need ep2400 patch.
selinux-policy-strict-1.19.12-2
-------------------------------
* Fri Dec 10 2004 Dan Walsh <dwalsh(a)redhat.com> 1.19-12-2
- Add support for winbindd from nscd
system-config-kickstart-2.5.18-1
--------------------------------
* Fri Dec 10 2004 Chris Lumens <clumens(a)redhat.com> - 2.5.18-1
- Get package group lists and their translations out of the comps.xml file
instead of reying on a built-in (and out of date) list.
- Added an "Install Everything" button (#134679).
* Thu Dec 02 2004 Chris Lumens <clumens(a)redhat.com> - 2.5.17-1
- Remove obsolete dependency resolution radio buttons.
* Tue Nov 23 2004 Chris Lumens <clumens(a)redhat.com> - 2.5.16-1
- Fix display in indic locale (#138310) and (#138601)
- Monitor order (#127477)
- Translation of RAID message (#127687)
- Unencrypted root passwords (#134678)
- Broken nfs line parsing (#134681)
system-config-printer-0.6.119-1
-------------------------------
* Fri Dec 10 2004 Tim Waugh <twaugh(a)redhat.com>
- Purge magicfilter references (bug #45687).
- 0.6.119:
- Purge magicfilter references (bug #45687).
- Avoid traceback when there is no IEEE 1284 ID (bug #141430).
util-linux-2.12j-1
------------------
* Fri Dec 10 2004 Elliot Lee <sopwith(a)redhat.com> 2.12j-1
- Update to util-linux-2.12j
19 years, 5 months
enabling selinux
by Steven Pritchard
Excuse me for a stupid selinux question...
Is there something I have to do when packaging a daemon to make
selinux policy apply to it?
I have an OpenVPN package in the fedora.us QA queue
(https://bugzilla.fedora.us/show_bug.cgi?id=1531). I noticed that
selinux-policy-targeted-sources includes a file openvpn.fc, but I have
no idea how to connect the dots to make it all work...
Steve
--
Steven Pritchard - K&S Pritchard Enterprises, Inc.
Email: steve(a)kspei.com http://www.kspei.com/
Phone: (618)398-3000 Mobile: (618)567-7320
19 years, 5 months
[Dump-users] preliminary EA/ACL support in dump/restore (fwd)
by Kenneth Porter
FYI, particularly for the SELinux people:
------------ Forwarded Message ------------
Date: Friday, December 10, 2004 5:13 PM +0100
From: Stelian Pop <stelian(a)popies.net>
To: dump-announce(a)lists.sourceforge.net
Cc: dump-users(a)lists.sourceforge.net, dump-devel(a)lists.sourceforge.net
Subject: [Dump-users] preliminary EA/ACL support in dump/restore
Hi everybody.
Support of ACLs is a feature requested by many for a long time and I
finally got the time to implement it. Since on Linux ACLs are only
a particular case of EAs (Extended Attributes), I implemented full
EA support, meaning that even security labels set (for example) by
SELinux will be backuped.
You can download a patch (against the current CVS dump) here:
http://dump.sourceforge.net/dump-ea.patch.bz2
Some notes:
* the patch is complete, meaning that everything is supposed to
work: dumping, extraction, comparing, in all modes etc.
* the patch modifies some key areas of restore, so pay
attention and verify that you can reread your backups
before relying on them.
* the tape format changed a bit and you will need the patched
restore to extract the files.(*)
Please test this and report back if there are any issues.
I plan to release a new version of dump (0.4b38) in the next few
days, but I will NOT include the EA patch in it, because it really
needs more testing.
But as soon as I get enough positive replies on the EA patch
I will include it in the official mainline.
Thanks,
Stelian.
(*) In fact is a bit more complicated:
- if no EAs are backuped, dump format should remain the same as in
the old versions, so you can use whatever restore you want.
- if EAs are backuped but never on directory inodes, then a reasonable
recent version of restore should be happy and just skip over the
extended attributes data.
- if EAs are backuped for directory inodes, older restores will fail
to extract with some 'directory corrupted' error.
--
Stelian Pop <stelian(a)popies.net>
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Dump-users mailing list
Dump-users(a)lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dump-users
---------- End Forwarded Message ----------
19 years, 5 months
where will i get logfiles of sched.c?
by abhijit kumar
sir!
I am using sevral "printk" commands to understand the kernel
scheduling using "sched.c" of kernel -2.4.26 . But, i am n't able to
locate any printed messages. where will i get it? the
"/var/log/messages" does n't show messages about it. my klogd and
syslogd is running.
waiting for ur replies.
Abhijit
19 years, 5 months
rawhide report: 20041210 changes
by Build System
Updated Packages:
a2ps-4.13b-43
-------------
* Thu Dec 09 2004 Tim Waugh <twaugh(a)redhat.com> 4.13b-43
- Fixed font path (bug #142294).
- Fixed problems in make_fonts_map script (bug #142299). Patch from
Michal Jaegermann.
anaconda-10.2.0.6-1
-------------------
* Wed Dec 08 2004 Jeremy Katz <katzj(a)redhat.com> - 10.2.0.6-1
- Write out wepkey better (#140645)
- Try to skip source isos with nfsiso (#106017)
- Don't traceback for bad/missing / in fstab (nasrat, #141174)
- Include pesize in generated ks.cfg (#141370)
- Loop less on shutdown
- Better handling of partial volume groups (#139058)
bzip2-1.0.2-14
--------------
* Thu Dec 09 2004 Jiri Ryska <jryska(a)redhat.com>
- changed temp file creation in bzdiff #92444
diskdumputils-0.6.2-1
---------------------
* Thu Dec 09 2004 Phil Knirsch <pknirsch(a)redhat.com> 0.6.2-1
- Tiny Requires fix for correct package ordering
dosfstools-2.10-1
-----------------
* Thu Dec 09 2004 Peter Vrabec <pvrabec(a)redhat.com> 2.10-1
- updated to 2.10
gdm-1:2.6.0.5-10
----------------
* Thu Dec 09 2004 Dan Walsh <dwalsh(a)redhat.com> 1:2.6.0.5-10
- Remove pam_selinux from gdmsetup pam file
ghostscript-7.07-36
-------------------
* Thu Dec 09 2004 Tim Waugh <twaugh(a)redhat.com> 7.07-36
- Remove VFlib2 bits (bug #120498).
logrotate-3.7.1-3
-----------------
* Mon Dec 06 2004 Peter Vrabec <pvrabec(a)redhar.com>
- compressed logfiles and logrotate (#140353)
ltrace-0.3.36-2
---------------
* Thu Dec 09 2004 Jakub Jelinek <jakub(a)redhat.com> 0.3.36-2
- make x86_64 ltrace trace both 32-bit and 64-bit binaries (#141955,
IT#55600)
- fix tracing across execve
- fix printf-style format handling on 64-bit arches
mc-1:4.6.1a-0.1
---------------
* Thu Dec 09 2004 Jindrich Novy <jnovy(a)redhat.com> 4.6.1a-0.1
- update from CVS
- sync UTF-8 patches with upstream
- drop upstreamed badsize, growbuf patches
- faster FISH upload support (#140750) - from Dmitry Butskoj
* Mon Dec 06 2004 Jindrich Novy <jnovy(a)redhat.com>
- add msglen patch to calculate message length correctly in UTF-8 (#141875)
(thanks to Nickolay V. Shmyrev)
- convert hints for ru, uk, zh, man page conversion fix
rpmdb-fedora-1:4-0.20041210
---------------------------
selinux-policy-strict-1.19.12-1
-------------------------------
* Wed Dec 08 2004 Dan Walsh <dwalsh(a)redhat.com> 1.19-12-1
- Update latest from NSA
- Add single_user_file_type tunable.
tcl-8.4.9-1
-----------
* Thu Dec 09 2004 Jens Petersen <petersen(a)redhat.com> - 8.4.9-1
- new stable release
tk-8.4.9-1
----------
* Thu Dec 09 2004 Jens Petersen <petersen(a)redhat.com> - 8.4.9-1
- latest stable release
* Wed Nov 24 2004 Jens Petersen <petersen(a)redhat.com> - 8.4.8-1
- update to latest release
19 years, 5 months
how do I make lsof be useful again in fc3?
by Jamie Zawinski
In FC3, lsof only seems to work properly if you are root.
For example: the "ssh-agent" process is running as "jwz" and has the
file "/tmp/ssh-rZlWVC4461/agent.4461" open.
If I run "lsof -p `pidof ssh-agent`" as root, it shows me this; if I run
it as jwz, it does not. This is wrong, since all processes and files
are owned by the same non-root user.
I assume this is because of newly-paranoid permissions on
/proc/*/fd (in FC3, those are all owned by root instead of the
user running the process.)
How do I fix it?
"Log in as root" is not a good answer, because I need to do this sort of
thing from various scripts that are run non-interactively (and not as
root.)
--
Jamie Zawinski
jwz(a)jwz.org http://www.jwz.org/
jwz(a)dnalounge.com http://www.dnalounge.com/
19 years, 5 months
