LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 03-16-2013, 09:40 PM   #1
alexchen
LQ Newbie
 
Registered: Feb 2013
Location: china
Distribution: slackware
Posts: 13

Rep: Reputation: Disabled
Smile Error install selinux on slackware


I installed the selinux user tools:
1.checkpolicy-2.1.8
2.libselinux-2.1.9
3.libsemanage-2.1.6
4.libsepol-2.1.4
5.policycoreutils-2.1.10
6.sepolgen-1.1.5
linux-kernel: 3.2.40
When I Run the scripts/usr/src/linux/scripts/selinux/install_policy.sh
policy.conf:ERROR 'unknow role base_r' at token ':' on line 1109
type base_t;
checkpolicy: error encountered while parsingconfiguration
How can I solve it ?
 
Old 03-17-2013, 09:47 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,529
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Quote:
Originally Posted by alexchen View Post
When I Run the script /usr/src/linux/scripts/selinux/install_policy.sh
policy.conf:ERROR 'unknow role base_r' at token ':' on line 1109
type base_t;
checkpolicy: error encountered while parsing configuration
While this message on its own is way too terse for me to say something conclusive about (plus you haven't referenced or told us what steps you took before running the script) it seems the "base_r" role wasn't defined before it's used (doh) so you'll have to find out first where it's referenced and if it's part of some .pp policy module load it first. One link that may come in handy is the SELinux Reference Policy mailing list at http://oss.tresys.com/mailman/listinfo/refpolicy BTW. And while it's slightly off topic I would be interested to know why you chose this particular MAC instead of 0) running a Linux distribution that fully supports SELinux out of the box or 1) choosing a different MAC you can graft on way easier like GRSecurity, TOMOYO, etc, etc?..
 
Old 03-18-2013, 08:43 AM   #3
alexchen
LQ Newbie
 
Registered: Feb 2013
Location: china
Distribution: slackware
Posts: 13

Original Poster
Rep: Reputation: Disabled
Ok, Thank you.
 
Old 03-18-2013, 09:51 AM   #4
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Ubuntu 10.10, Slackware 64-current
Posts: 2,120

Rep: Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776Reputation: 776
As a followup, my initial thought regarding the error message was that the file system hasn't been converted to support the SELinux extensions. Irregardless, I think it would be telling to look at the output of an 'ls -z' command to see what it reports.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Implementing SeLinux on Debian 5 (Lenny) -- can't install "selinux-basics" bashFUL Linux - Security 3 10-17-2011 01:16 AM
Questions about selinux on slackware okos Slackware 16 12-13-2008 04:04 AM
selinux and slackware mjgreen Slackware 3 09-09-2008 09:37 PM
selinux error on fresh core 6 install SpinningCone Fedora 7 05-21-2008 05:22 PM
SELinux and Slackware 2.6.14. Is it installed by default? Mainframe Linux - Security 1 11-11-2005 10:10 AM


All times are GMT -5. The time now is 08:41 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration