install

install

[Russell Coker]

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638304

I've reported a bug against coreutils regarding the SE Linux support in 
install(1).  In summary my main problem is that there is no way of using 
install to copy a file without bothering with it's SE Linux context.  For 
creating Debian packages (which can't store SE Linux contexts) I don't want to 
set the context to some specific value (which would differ depending on who 
builds it) and "preserving" the context won't always work either (EG I could 
use install(1) to copy a file to which I have read-only access).

As well as this it's not documented well enough.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: install

[Stephen Smalley]

On Thu, 2011-08-18 at 22:59 +1000, Russell Coker wrote:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638304
> 
> I've reported a bug against coreutils regarding the SE Linux support in 
> install(1).  In summary my main problem is that there is no way of using 
> install to copy a file without bothering with it's SE Linux context.  For 
> creating Debian packages (which can't store SE Linux contexts) I don't want to 
> set the context to some specific value (which would differ depending on who 
> builds it) and "preserving" the context won't always work either (EG I could 
> use install(1) to copy a file to which I have read-only access).
> 
> As well as this it's not documented well enough.

Looks like if you give it a relative path as the target, it won't try to
set the context, because it doesn't apply realpath(), unlike restorecon,
and matchpathcon() will always fail on a relative path as all of the
file_contexts pathname regexes begin with a slash.  Not sure if that was
intentional or not.

Anyway, how do you address the same issue for the package manager (dpkg
or rpm)?  Is there a way to suppress setting of the security context
when rpm or dpkg unpacks a package?

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: install

[Russell Coker]

On Thu, 18 Aug 2011, Stephen Smalley <sds@tycho.nsa.gov> wrote:
> Looks like if you give it a relative path as the target, it won't try to
> set the context, because it doesn't apply realpath(), unlike restorecon,
> and matchpathcon() will always fail on a relative path as all of the
> file_contexts pathname regexes begin with a slash.  Not sure if that was
> intentional or not.

For the case of Debian package creation an absolute path is the most common 
way to do things.  I think that Debian package creation alone is a sufficient 
reason for changing this (in Debian at least).

> Anyway, how do you address the same issue for the package manager (dpkg
> or rpm)?  Is there a way to suppress setting of the security context
> when rpm or dpkg unpacks a package?

dpkg will call matchpathcon() whenever SE Linux is enabled, there doesn't 
appear to be a way of disabling this or a good reason for doing so.

A significant portion of the uses of install(1) involve something other than 
installing a system file.  The case of using install as part of a Debian 
package creation process (or some other form of archive creation) either 
deliberately or through "make install" is extremely common.  Changing tens of 
thousands of Makefiles isn't a viable option and having lots of warning 
messages isn't a great situation, so it seems that changing install(1) is 
required.

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Install

[Raenan Guadez]

I'm confused on how to configure the card in terminal to work? Is there a clear step by step command line prompt to follow?

Sent from my iPhone

Re: Install

[Julian Calaby]

Hi Raenan,

You seem to be new here, so just a couple of pointers. Firstly make
sure you Reply All, and CC linux-wireless when replying. Secondly,
most of us are volunteers and do support in our spare time, so don't
expect a prompt reply. Also, please don't top post - if I replied only
with this paragraph, I'd be top posting, my response, below your
quoted message is bottom posting and is the best way to format your
emails for mailing lists like this one.

On Tue, Jan 22, 2013 at 7:00 PM, Raenan Guadez <raenanguadez@gmail.com> wrote:
> I'm confused on how to configure the card in terminal to work? Is there a clear step by step command line prompt to follow?

What exactly are you trying to do?

Firstly, I have to ask the standard questions:
1. Which distribution are you using and what version?
2. What kernel version are you using?
3. Are you using compat-wireless and if so, what version?
4. What type of card are you trying to use? Running "lspci" or "lsusb"
should help identify it.
5. Have you installed the firmware for it? (If applicable)
6. Is it detected by the kernel? i.e. if you run "dmesg", are there
lines referencing the card?

But back to your questions.

Are you using a graphical user interface, e.g. Gnome, Unity or KDE? If
so, you should install Network Manager or wicd as this will take care
of configuring your wireless card and do it in a nice user-friendly
manner.

If you don't, then the simplest way is to use wpa_supplicant to manage
the wireless card. Your distribution should provide a manual with it
(try running "man wpa_supplicant") which will describe how to
configure it.

Please let us know how you go.

Thanks,

-- 
Julian Calaby

Email: julian.calaby@gmail.com
Profile: http://www.google.com/profiles/julian.calaby/
.Plan: http://sites.google.com/site/juliancalaby/

Re: Install

[Julian Calaby]

Hi Raenan,

I also forgot to mention: HTML emails are not accepted by the list, so
despite you CCing linux-wireless, it was only received by me.

On Wed, Jan 23, 2013 at 5:27 PM, raenan guadez <raenanguadez@gmail.com> wrote:
> Hi Julian,
>
> Yes I am new to linux.  Thank you for letting me know the structure for the
> emails.  I appreciate the help and do understand its volunteer.
>
> Firstly, I have to ask the standard questions:
> 1. Which distribution are you using and what version?
> I am using Ubuntu Desktop 12.04 LTS

Good, I'm somewhat familiar with that distro.

> 2. What kernel version are you using?
> 3.2.0 - 36 generic pae
>
> 3. Are you using compat-wireless and if so, what version?
> not sure, how do i find out?

If you don't know then you're probably not. It's not an issue.

> 4. What type of card are you trying to use? Running "lspci" or "lsusb"
> should help identify it.
> Intel Pro/Wireless 3945 ABG card

Ok, the driver for those is fairly stable.

> 5. Have you installed the firmware for it? (If applicable)
> I do not believe the firmware is installed because when I go under Network
> it says the firmware is missing for the wireless device.

Then you _need_ to install the firmware. This is in the
firmware-iwlwifi package.

> 6. Is it detected by the kernel? i.e. if you run "dmesg", are there
> lines referencing the card?
> Yes it detects the card

Good.

I note that you are using Network Manager. Once the firmware is
installed, Network Manager will detect the card and configure it for
you.

If you're still desperate to connect to a wireless network from the
command line, then the simplest way is to use wpa_supplicant to manage
the wireless card. Note that you will have to _completely_ disable
Network Manager for it to work. Your distribution should provide a
manual with it (try running "man wpa_supplicant") which will describe
how to configure it.

Note that in Network Manager, if you change a connection to be
"available to all users" Network Manager will connect to it on startup
before you log in. Also, network connections aren't restricted to a
particular user or just the GUI or anything like that - once it's
connected, everyone on the computer can use it.

Thanks,

-- 
Julian Calaby

Email: julian.calaby@gmail.com
Profile: http://www.google.com/profiles/julian.calaby/
.Plan: http://sites.google.com/site/juliancalaby/

Install

[Other Special]

[-- Attachment #1.1.1: Type: text/plain, Size: 1399 bytes --]

Guaranteed Huge Savings new Fast Easy is way Price is Make it faster easier grounds work projects using.

Deals Solutions Jobs is Growth Plan am Commercial Company Policy Contract Cost Customers Estimating Specs Labor Time is Data.
Take look or at our Discounted save even Complete Featured Leading Thousands of Sold Nationwide am now of Check am out Profit Building.
Hourly Rates Irrigation Install Lighting is Liquid Loam a Installed Mulch Organic am Parking lot Line is Marking Sweeping Paving Pavement Planting.
Nilsson for a on sales operations bidding pricing in employees management more or Phil a Best Selling of Author Menu am Audio Tapes is Video how Order the System Other Special am Book Discounts.
Save even Complete Featured Leading Thousands of Sold Nationwide now am Check out Profit Building Ideas Start?
Even of Complete Featured Leading a Thousands of Sold Nationwide of now Check out Profit Building Ideas Start.
Book Discounts a click is here Topics a Package Deals is Solutions in Jobs Growth Plan Commercial a Company Policy Contract is Cost Customers Estimating Specs Labor Time Data a Mowing!
Services Winter Income Need Please of call toll anytime more by am phone or if you selecting that will is solve your am problems Take is look at our Discounted save even Complete Featured am.
Resou rce compare prices with industry of averages Survey Covers Aerating Back!

[-- Attachment #1.1.2: Type: text/html, Size: 1917 bytes --]

[-- Attachment #1.2: Spraying.gif --]
[-- Type: image/gif, Size: 7681 bytes --]

[-- Attachment #2: Type: text/plain, Size: 373 bytes --]

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642

[-- Attachment #3: Type: text/plain, Size: 197 bytes --]

_______________________________________________
Kernel-janitor-discuss mailing list
Kernel-janitor-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/kernel-janitor-discuss