selinux/2.6 on knoppix 3.3

selinux/2.6 on knoppix 3.3

[Dhruv Gami]

hello everyone,

im a new user for selinux, and am trying to compile selinux for kernel 
2.6 on a knoppix 3.3 hdinstall (its basically a debian install).

I managed to compile the kernel (2.6), but only after removing certain 
modules which were preventing compilation of the kernel.

Now when i tried to compile the selinux-usr packages, libselinux asks 
for attr/xattr.h in some of the files, and i am unable to find libattr 
for debian. i tried googling for it, but only found RPM packages for 
libattr.

am i doing something wrong here ? am i supposed to install/use something 
else ?

any help would be most appreciated.

regards,
Gami


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: selinux/2.6 on knoppix 3.3

[Dale Amon]

On Mon, Nov 03, 2003 at 06:37:43PM +0100, Dhruv Gami wrote:
> hello everyone,
> 
> im a new user for selinux, and am trying to compile selinux for kernel 
> 2.6 on a knoppix 3.3 hdinstall (its basically a debian install).
> 
> I managed to compile the kernel (2.6), but only after removing certain 
> modules which were preventing compilation of the kernel.
> 
> Now when i tried to compile the selinux-usr packages, libselinux asks 
> for attr/xattr.h in some of the files, and i am unable to find libattr 
> for debian. i tried googling for it, but only found RPM packages for 
> libattr.
> 
> am i doing something wrong here ? am i supposed to install/use something 
> else ?
> 
> any help would be most appreciated.

It is libattr1 I believe, and is certainly available in
sid and sarge. woody also I believe but haven't gone
and checked. 

------------------------------------------------------
       IN MY NAME:            Dale Amon, CEO/MD
  No Mushroom clouds over     Islandone Society
    London and New York.      www.islandone.org
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: selinux/2.6 on knoppix 3.3

[Stephen Smalley]

[-- Attachment #1: Type: text/plain, Size: 1034 bytes --]

On Mon, 2003-11-03 at 12:37, Dhruv Gami wrote:
> hello everyone,
> 
> im a new user for selinux, and am trying to compile selinux for kernel 
> 2.6 on a knoppix 3.3 hdinstall (its basically a debian install).
> 
> I managed to compile the kernel (2.6), but only after removing certain 
> modules which were preventing compilation of the kernel.
> 
> Now when i tried to compile the selinux-usr packages, libselinux asks 
> for attr/xattr.h in some of the files, and i am unable to find libattr 
> for debian. i tried googling for it, but only found RPM packages for 
> libattr.
> 
> am i doing something wrong here ? am i supposed to install/use something 
> else ?

If you have a modern glibc (>= 2.3) built against recent kernel headers
(>= 2.4.20), then you can just apply the attached patch to libselinux
and build it without libattr.  Otherwise, you need to obtain libattr. 
Note that the sourceforge CVS tree already includes this change (and
several others). 

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency

[-- Attachment #2: libselinux-attr.patch --]
[-- Type: text/x-patch, Size: 4446 bytes --]

Index: libselinux/src/Makefile
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/Makefile,v
retrieving revision 1.14
diff -u -r1.14 Makefile
--- libselinux/src/Makefile	8 Oct 2003 19:30:44 -0000	1.14
+++ libselinux/src/Makefile	9 Oct 2003 19:45:08 -0000
@@ -20,7 +20,7 @@
 	ranlib $@
 
 $(LIBSO): $(OBJS)
-	$(CC) $(LDFLAGS) -shared -o $@ $^ -lattr -Wl,-soname,$(LIBSO) 
+	$(CC) $(LDFLAGS) -shared -o $@ $^ -Wl,-soname,$(LIBSO) 
 	ln -sf $@ $(TARGET) 
 
 %.o:  %.c
Index: libselinux/src/fgetfilecon.c
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/fgetfilecon.c,v
retrieving revision 1.4
diff -u -r1.4 fgetfilecon.c
--- libselinux/src/fgetfilecon.c	17 Jul 2003 14:03:27 -0000	1.4
+++ libselinux/src/fgetfilecon.c	9 Oct 2003 19:44:51 -0000
@@ -4,7 +4,7 @@
 #include <selinux/selinux.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <attr/xattr.h>
+#include <sys/xattr.h>
 #include "policy.h"
 
 int fgetfilecon(int fd, security_context_t *context)
Index: libselinux/src/fsetfilecon.c
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/fsetfilecon.c,v
retrieving revision 1.1
diff -u -r1.1 fsetfilecon.c
--- libselinux/src/fsetfilecon.c	28 Apr 2003 14:09:37 -0000	1.1
+++ libselinux/src/fsetfilecon.c	9 Oct 2003 19:44:51 -0000
@@ -4,7 +4,7 @@
 #include <selinux/selinux.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <attr/xattr.h>
+#include <sys/xattr.h>
 #include "policy.h"
 
 int fsetfilecon(int fd, security_context_t context)
Index: libselinux/src/getfilecon.c
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/getfilecon.c,v
retrieving revision 1.4
diff -u -r1.4 getfilecon.c
--- libselinux/src/getfilecon.c	17 Jul 2003 14:03:28 -0000	1.4
+++ libselinux/src/getfilecon.c	9 Oct 2003 19:44:51 -0000
@@ -4,7 +4,7 @@
 #include <selinux/selinux.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <attr/xattr.h>
+#include <sys/xattr.h>
 #include "policy.h"
 
 int getfilecon(const char *path, security_context_t *context)
Index: libselinux/src/lgetfilecon.c
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/lgetfilecon.c,v
retrieving revision 1.4
diff -u -r1.4 lgetfilecon.c
--- libselinux/src/lgetfilecon.c	17 Jul 2003 14:03:28 -0000	1.4
+++ libselinux/src/lgetfilecon.c	9 Oct 2003 19:44:51 -0000
@@ -4,7 +4,7 @@
 #include <selinux/selinux.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <attr/xattr.h>
+#include <sys/xattr.h>
 #include "policy.h"
 
 int lgetfilecon(const char *path, security_context_t *context)
Index: libselinux/src/lsetfilecon.c
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/lsetfilecon.c,v
retrieving revision 1.1
diff -u -r1.1 lsetfilecon.c
--- libselinux/src/lsetfilecon.c	28 Apr 2003 14:09:37 -0000	1.1
+++ libselinux/src/lsetfilecon.c	9 Oct 2003 19:44:51 -0000
@@ -4,7 +4,7 @@
 #include <selinux/selinux.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <attr/xattr.h>
+#include <sys/xattr.h>
 #include "policy.h"
 
 int lsetfilecon(const char *path, security_context_t context)
Index: libselinux/src/setfilecon.c
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/src/setfilecon.c,v
retrieving revision 1.1
diff -u -r1.1 setfilecon.c
--- libselinux/src/setfilecon.c	28 Apr 2003 14:09:37 -0000	1.1
+++ libselinux/src/setfilecon.c	9 Oct 2003 19:44:51 -0000
@@ -4,7 +4,7 @@
 #include <selinux/selinux.h>
 #include <stdlib.h>
 #include <errno.h>
-#include <attr/xattr.h>
+#include <sys/xattr.h>
 #include "policy.h"
 
 int setfilecon(const char *path, security_context_t context)
Index: libselinux/utils/Makefile
===================================================================
RCS file: /nfshome/pal/CVS/selinux-usr/libselinux/utils/Makefile,v
retrieving revision 1.5
diff -u -r1.5 Makefile
--- libselinux/utils/Makefile	7 Jul 2003 12:53:42 -0000	1.5
+++ libselinux/utils/Makefile	9 Oct 2003 19:45:14 -0000
@@ -4,7 +4,7 @@
 
 CFLAGS = -Wall
 override CFLAGS += -I../include
-LDLIBS += -L../src -lselinux -lattr
+LDLIBS += -L../src -lselinux 
 
 TARGETS=$(patsubst %.c,%,$(wildcard *.c))