IPsec-Tools install problems

sasser · 04-19-2010, 04:40 PM

I try to install IPsec-Tools on Slackware 13, but I get an configure error:
configure: error: Security Context requested, bu no selinux support! Aborting.

I'm linux newbie and I'm following a slackware-basics tutorial, I did as in the tutorial, but the configure stops and aborts:

Code:

# CFLAGS="-O2 -march=i486 -mcpu=i686" \
  ./configure --prefix=/usr \
              --sysconfdir=/etc \
              --localstatedir=/var \
              --enable-hybrid \
              --enable-natt \
              --enable-dpd \
              --enable-frag \
              i486-slackware-linux
# make
# make install

What can I do? How can I enable/install selinux support?
I guess it's related with AH and ESP protocols, which in my kernel are defined as modules (m). If so, how can I enable them?

Thanks

grail · 04-19-2010, 08:41 PM

Well firstly I found you can pass this option : --enable-security-context=no
Otherwise, check that your kernel has selinux support compiled in, not just your protocols listed.
If it is also a module and not loading automatically, you could try and modprobe it.

sasser · 04-20-2010, 02:34 PM

I don't know how to check if my kernel has selinux support compiled in, I'm new in Linux. I did looked in the .config file generated with command:

Code:

# zcat /proc/config.gz > /usr/src/linux/.config

There is no "selinux" string. I'm using the 2.6.29.6 kernel.
Googleing about selinux I've found the Slackware doesn't have support for selinux.. does that mean I can't use IPSec?

grail · 04-20-2010, 09:33 PM

Well it means you can't use that option of it, so try the switch I wrote in my last post in your configure option and see how you go.

sasser · 04-21-2010, 12:33 PM

It works with that option (--enable-security-context=no), thanks!

By the way, the ipsec policy is started with setkey command but how can be stopped? Is there any disable/stop command? So far to switch back to see the differences before and after I had to restart.

grail · 04-21-2010, 10:45 PM

Sorry, haven't used this application, hopefully someone will see. If not, it may pay to open a second question
with this specific query.