7:47 a.m.
If I recall, there was a change in the ext2 utilities from FC3 to FC4
which fsils with earlier distro created partitions.
I believe you need to disable filechecking with the entries in your
fstab file. That is, change the last two digits in your older distros
to zero.
Alternatively, you could mount the other OS partitions whenever you need
to access the files on the common partitions..
Are you talking about a common /home partition?
Yes, and therefore, I can't use my privous installations anymore.
And I have no idea, how to convert the ext3 back.
I have read already bug #174618, but they assume a kernel patch for
FC4. But as I want to use Centos4 and don't believe RedHat will corporate
such a patch into their Kernels.
8:31 a.m.
On Thu, 2005-12-22 at 14:47 +0100, gsc.news(a)online.de wrote:
>If I recall, there was a change in the ext2 utilities from FC3 to
FC4
>which fsils with earlier distro created partitions.
>
>I believe you need to disable filechecking with the entries in your
>fstab file. That is, change the last two digits in your older distros
>to zero.
>Alternatively, you could mount the other OS partitions whenever you need
>to access the files on the common partitions..
>
>Are you talking about a common /home partition?
Yes, and therefore, I can't use my privous installations anymore.
that sounds nasty; maybe fedora should turn off MLS for now until
there's a better compatibility?
I have read already bug #174618, but they assume a kernel patch for
FC4. But as I want to use Centos4 and don't believe RedHat will corporate
such a patch into their Kernels.
well if you use CentOS4 the question is "will CentOS put it into their
kernel" not "will Red Hat"....
10:54 a.m.
Arjan van de Ven wrote:
that sounds nasty; maybe fedora should turn off MLS for now until
there's a better compatibility?
> I have read already bug #174618, but they assume a kernel patch for
> FC4. But as I want to use Centos4 and don't believe RedHat will corporate
> such a patch into their Kernels.
>
well if you use CentOS4 the question is "will CentOS put it into their
kernel" not "will Red Hat"....
No Centos does only recompile the redhat src.rpm's:
If not in RHEL4 => not in Centos4
12:44 p.m.
Dr. Günter Schmidt wrote:
Arjan van de Ven wrote:
> that sounds nasty; maybe fedora should turn off MLS for now until
> there's a better compatibility?
>
>
>
>> I have read already bug #174618, but they assume a kernel patch for
>> FC4. But as I want to use Centos4 and don't believe RedHat will corporate
>> such a patch into their Kernels.
>>
>>
> well if you use CentOS4 the question is "will CentOS put it into their
> kernel" not "will Red Hat"....
>
>
No Centos does only recompile the redhat src.rpm's:
If not in RHEL4 => not in Centos4
Every year I see the xmas season bank robber news clips and shake my head.
Facts about bank robbers.
1.
They get away with very little money.
2.
They always get caught. (so few don't they become the experts in
bank robbing and write books.)
3.
They are not very smart.
My mainframe is on the video screen,
it's nineteen sixty seven,
It's the prettiest computer I've every seen,
my big blue water cool died and when to heavvvv' IN
Don't know why it had to go,
the extended attributes came like an April snow,
Security gave it just six months,
The Unix boys when out to lunch
If only I had read the news,
then maybe I would have had a hunch,
There been a change in the wind,
file systems can never be shared aaaaaagaaaa' IN
My mainframe is on the video screen,
it's nineteen sixty seven,
It's the prettiest computer I've every seen,
my big blue water cool died and when to heavvvv' IN
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
nun na Knock Knock
And you call yourself a doctor. Humph!
8:18 p.m.
On Thu, Dec 22, 2005 at 03:31:03PM +0100, Arjan van de Ven wrote:
On Thu, 2005-12-22 at 14:47 +0100, gsc.news(a)online.de wrote:
> >If I recall, there was a change in the ext2 utilities from FC3 to FC4
> >which fsils with earlier distro created partitions.
> >
> >I believe you need to disable filechecking with the entries in your
> >fstab file. That is, change the last two digits in your older distros
> >to zero.
> >Alternatively, you could mount the other OS partitions whenever you need
> >to access the files on the common partitions..
> >
> >Are you talking about a common /home partition?
>
> Yes, and therefore, I can't use my privous installations anymore.
that sounds nasty; maybe fedora should turn off MLS for now until
there's a better compatibility?
The latest FC4 update kernel can read MLS labelled filesystems without problem.
I've not checked FC3, that one might be a little more tricky, as the compat code
requires changes that have happened post 2.6.12 (where FC3 is currently sat).
Given the effort required to make that work, the limited time remaining in the
FC3 lifetime, and the low general appeal of such a feature, it probably won't
get fixed.
Dave
2:23 a.m.
On Thu, 2005-12-22 at 21:18 -0500, Dave Jones wrote:
On Thu, Dec 22, 2005 at 03:31:03PM +0100, Arjan van de Ven wrote:
> On Thu, 2005-12-22 at 14:47 +0100, gsc.news(a)online.de wrote:
> > >If I recall, there was a change in the ext2 utilities from FC3 to FC4
> > >which fsils with earlier distro created partitions.
> > >
> > >I believe you need to disable filechecking with the entries in your
> > >fstab file. That is, change the last two digits in your older distros
> > >to zero.
> > >Alternatively, you could mount the other OS partitions whenever you need
> > >to access the files on the common partitions..
> > >
> > >Are you talking about a common /home partition?
> >
> > Yes, and therefore, I can't use my privous installations anymore.
>
> that sounds nasty; maybe fedora should turn off MLS for now until
> there's a better compatibility?
The latest FC4 update kernel can read MLS labelled filesystems without problem.
I've not checked FC3, that one might be a little more tricky, as the compat code
requires changes that have happened post 2.6.12 (where FC3 is currently sat).
Given the effort required to make that work, the limited time remaining in the
FC3 lifetime, and the low general appeal of such a feature, it probably won't
get fixed
given that even RHEL4 can't get compatibility code.. why go through this
pain in the first place? Is MLS a compelling enough feature for fedora
to go through this pain? Is it even used for something or by someone in
the first place?
3:50 p.m.
On Friday 23 December 2005 19:23, Arjan van de Ven <arjan(a)fenrus.demon.nl>
wrote:
given that even RHEL4 can't get compatibility code.. why go
through this
pain in the first place? Is MLS a compelling enough feature for fedora
to go through this pain? Is it even used for something or by someone in
the first place?
Firstly the vast majority of Fedora and RHEL users will never use MLS. What
they will use is MCS which is based on some of the features of MLS (it's not
a sub-set of MLS though).
MCS provides some compelling benefits in terms of managing secret data.
It allows the administrator to create a set of named "categories" for
labelling data. Each user login will have a set of categories (which may be
empty) assigned to it from the 256 available categories (we produce binary
policies that support 256 categories, the administrator can change this but
it's unlikely that they would need to).
Every file on disk will have a set of categories (which may be empty). To
access a file when running the MCS policy the process must have a set of
categories that's a superset of the categories assigned to the file.
This provides several features that are not available in any other way. One
is that a file can have multiple categories that are all required by every
process that may access it. Traditionally this is implemented by
supplemental groups and having the file in question and the directory
containing it owned by different groups such that one group is required for
directory access and another for file access.
Another feature that we are still working on is the exact method of
determining how categories are granted to processes. I'm working on a patch
that makes categories mandatory and permits a process to launch a child
process with a subset of it's categories. This permits a process to launch a
child with less access than it has (something that a non-root process can't
do with traditional Linux access control).
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
6 p.m.
gsc.news(a)online.de wrote:
>If I recall, there was a change in the ext2 utilities from FC3 to
FC4
>which fsils with earlier distro created partitions.
>
>I believe you need to disable filechecking with the entries in your
>fstab file. That is, change the last two digits in your older distros
>to zero.
>Alternatively, you could mount the other OS partitions whenever you need
>to access the files on the common partitions..
>
>Are you talking about a common /home partition?
Yes, and therefore, I can't use my privous installations anymore.
And I have no idea, how to convert the ext3 back.
I have read already bug #174618, but they assume a kernel patch for
FC4. But as I want to use Centos4 and don't believe RedHat will corporate
such a patch into their Kernels.
I like the seperate partitions for /boot for each installation. Another
good idea is to chainload the different installations and installing
grub in each distros boot partiton. In that way, you do not have to be
concerned about installations butting heads with each other.
With using one /boot partition between several installations, the
boot/grub directory is probably a mangled mess with each installation
overwriting the other distributions files.
I am surprises a common /boot partition scheme even works.
The issue with preventing file checking with older distributions and
newer distributions being mixed on the same system, caused a person to
be dropped to the maintenence shell when an ext3 partition was mounted.
I cannot recall which way the problem went, older to newer or newer to
older.
Since you did not mention FC4, I assumed you were effected by the
problem which was due to incompatibility between FC3 and FC4. A /home
partition which was common between distros would have dropped you to
maintenence with the problem that I was thinking of.
Regarding recovering your partitions, Unless you formatted the
partitions, you should have the same makeup for them. /boot/grub is
probably a mess though. All I see is that you might have to make a boot
partition for each distribution. You might need to deal with this on the
fedora forum or the Centos list or in documentation for the details on
seperate /boot partitions, using /boot off of the / partition and other
schemes.
Jim
6662
days inactive
6693
days old
7 comments
6 participants
participants (6)
-
Arjan van de Ven -
Darwin H. Webb -
Dave Jones -
Günter Schmidt -
Jim Cornette -
Russell Coker