Hi,
Ok... This will help...

#################################################################
5.2 In /var/log/messages it says "kernel: There is already a security framework initialized, register_security failed. kernel: dazuko: failed to register". What is wrong?

This occurs because another security module is already loaded and is not allowing Dazuko to be loaded. In order to allow multiple security modules, Linux 2.6 supports stacking. Unfortunately some modules do not implement this, which makes it impossible to load additional security modules. Dazuko does support stacking correctly. If you make sure that Dazuko is the first loaded security module, than other modules can also be loaded.

Typically the problem is the "capability" module. You can verify that this is the problem by unloading the "capability" module, loading Dazuko, and then reloading the "capability" module:

# rmmod capability
# insmod ./dazuko.ko
# modprobe capability

If this was indeed the problem, you can usually configure your system to load modules in a specific order. This varies between Linux distributions.
#################################################################

Sorry I heavend read that...

But is there a way to use it with rsbac ?

Thnaks a lot

Frank

I've got this output:

################################################################
[root@Paule dazuko-2.2.0]# ./configure --disable-rsbac
checking host system type... Linux
checking for make utility... ok (make)
checking for C compiler... ok (cc)
kernel source in /lib/modules/2.6.14-2mdksmp/build... yes
acquiring Linux kernel code configuration... ok
checking if Linux is RSBAC patched... (forced) no
checking if devfs is enabled... no
discovered host system... Linux (2.6.14)
checking if security module support is enabled... yes
verifying capabilities are not built-in... ok
locating LSM API header... ok
identifying LSM API... ok
inspecting suspend function... ok (suspend1)
checking whether __d_path() is exported... yes
inspecting class type... ok (class)
disabling ON_CLOSE events (not available for Linux 2.6)
configure: creating Makefile
configure: creating library/Makefile
configure: creating example_c/Makefile

./configure successful

=======================
 Configuration summary
=======================

module events = ON_OPEN ON_EXEC
devfs support = no
rsbac support = no
stacking support = yes
local __d_path() = no
module debug = no
library 1.x compatibility = yes

[root@Paule dazuko-2.2.0]# make
make -C /lib/modules/2.6.14-2mdksmp/build SUBDIRS="/Ablage/dazuko-2.2.0" modulesmake[1]: Entering directory `/usr/src/linux-2.6.14'
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_core.o
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_transport.o
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_linux26_lsm.o
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_linux26.o
  LD [M]  /Ablage/dazuko-2.2.0/dazuko.o
  Building modules, stage 2.
  MODPOST
  CC      /Ablage/dazuko-2.2.0/dazuko.mod.o
  LD [M]  /Ablage/dazuko-2.2.0/dazuko.ko
make[1]: Leaving directory `/usr/src/linux-2.6.14'
touch dummy_rule
[root@Paule dazuko-2.2.0]# make test
/sbin/modprobe commoncap
/sbin/insmod ./dazuko.ko
insmod: error inserting './dazuko.ko': -1 Invalid parameters
make: * [test] Fehler 1
[root@Paule dazuko-2.2.0]#
#################################################################

It seems that there is no support for Mandriva users here... :-(