mainDazuko - Support: sr #105220, Dazuko-Rsbac compile problems...

 
 

sr #105220: Dazuko-Rsbac compile problems Mandriva

Submitter:  Frank wegmann <furrama>
Submitted:  Fri 10 Mar 2006 03:26:24 PM UTC
   
 
Assigned to:  None Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Sat 29 Jul 2006 09:59:10 AM UTC, comment #6: 

If you want to use Dazuko and RSBAC with Mandriva, I suggest using the version of Dazuko that was included with RSBAC. As far as I know, RSBAC in Mandriva can be activated with a certain boot parameter.

John Ogness <ogman>
Group administrator
Thu 13 Apr 2006 08:55:25 AM UTC, comment #5: 

Hi,
Ok... This will help...

#################################################################
5.2 In /var/log/messages it says "kernel: There is already a security framework initialized, register_security failed. kernel: dazuko: failed to register". What is wrong?

This occurs because another security module is already loaded and is not allowing Dazuko to be loaded. In order to allow multiple security modules, Linux 2.6 supports stacking. Unfortunately some modules do not implement this, which makes it impossible to load additional security modules. Dazuko does support stacking correctly. If you make sure that Dazuko is the first loaded security module, than other modules can also be loaded.

Typically the problem is the "capability" module. You can verify that this is the problem by unloading the "capability" module, loading Dazuko, and then reloading the "capability" module:

# rmmod capability
# insmod ./dazuko.ko
# modprobe capability

If this was indeed the problem, you can usually configure your system to load modules in a specific order. This varies between Linux distributions.
#################################################################

Sorry I heavend read that...

But is there a way to use it with rsbac ?

Thnaks a lot

Frank

Frank wegmann <furrama>
Tue 11 Apr 2006 08:24:53 AM UTC, comment #4: 

In /var/log/messages you will see details about why "make test" failed. There is also information about the various reasons on the FAQ.

John Ogness <ogman>
Group administrator
Mon 10 Apr 2006 07:10:35 PM UTC, comment #3: 

I've got this output:

################################################################
[root@Paule dazuko-2.2.0]# ./configure --disable-rsbac
checking host system type... Linux
checking for make utility... ok (make)
checking for C compiler... ok (cc)
kernel source in /lib/modules/2.6.14-2mdksmp/build... yes
acquiring Linux kernel code configuration... ok
checking if Linux is RSBAC patched... (forced) no
checking if devfs is enabled... no
discovered host system... Linux (2.6.14)
checking if security module support is enabled... yes
verifying capabilities are not built-in... ok
locating LSM API header... ok
identifying LSM API... ok
inspecting suspend function... ok (suspend1)
checking whether __d_path() is exported... yes
inspecting class type... ok (class)
disabling ON_CLOSE events (not available for Linux 2.6)
configure: creating Makefile
configure: creating library/Makefile
configure: creating example_c/Makefile

./configure successful

=======================
 Configuration summary
=======================

module events = ON_OPEN ON_EXEC
devfs support = no
rsbac support = no
stacking support = yes
local __d_path() = no
module debug = no
library 1.x compatibility = yes

[root@Paule dazuko-2.2.0]# make
make -C /lib/modules/2.6.14-2mdksmp/build SUBDIRS="/Ablage/dazuko-2.2.0" modulesmake[1]: Entering directory `/usr/src/linux-2.6.14'
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_core.o
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_transport.o
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_linux26_lsm.o
  CC [M]  /Ablage/dazuko-2.2.0/dazuko_linux26.o
  LD [M]  /Ablage/dazuko-2.2.0/dazuko.o
  Building modules, stage 2.
  MODPOST
  CC      /Ablage/dazuko-2.2.0/dazuko.mod.o
  LD [M]  /Ablage/dazuko-2.2.0/dazuko.ko
make[1]: Leaving directory `/usr/src/linux-2.6.14'
touch dummy_rule
[root@Paule dazuko-2.2.0]# make test
/sbin/modprobe commoncap
/sbin/insmod ./dazuko.ko
insmod: error inserting './dazuko.ko': -1 Invalid parameters
make: * [test] Fehler 1
[root@Paule dazuko-2.2.0]#
#################################################################

Frank wegmann <furrama>
Mon 10 Apr 2006 06:37:37 PM UTC, comment #2: 

Mandriva has RSBAC included (but disabled). Dazuko is falsely configuring itself for RSBAC. If you manually specify not to use RSBAC, then it should work:

# ./configure --disable-rsbac
# make
# make test
# make install

John Ogness <ogman>
Group administrator
Thu 16 Mar 2006 05:45:43 PM UTC, comment #1: 

It seems that there is no support for Mandriva users here... :-(

Frank wegmann <furrama>
Fri 10 Mar 2006 03:26:24 PM UTC, original submission:  

Hello,

When I compile Dazuko an Mandriva (With Cooker Kernel 2.6.14) I've got this error:

#################################################################
[root@Paule linux-2.6.14]# make
  CHK     include/linux/version.h
  CHK     include/linux/compile.h
  CHK     usr/initramfs_list
  CC      rsbac/adf/daz/dazuko_rsbac.o
In file included from rsbac/adf/daz/dazuko_rsbac.c:31:
rsbac/adf/daz/dazuko_rsbac.h:23:5: warning: "CONFIG_MODVERSIONS" is not defined
rsbac/adf/daz/dazuko_rsbac.c: In function 'xp_init_cache':
rsbac/adf/daz/dazuko_rsbac.c:509: warning: implicit declaration of function 'rsbac_daz_get_ttl'
rsbac/adf/daz/dazuko_rsbac.c:512: warning: implicit declaration of function 'rsbac_daz_set_ttl'
rsbac/adf/daz/dazuko_rsbac.c:514: warning: implicit declaration of function 'rsbac_daz_flush_cache'
rsbac/adf/daz/dazuko_rsbac.c: In function 'rsbac_adf_request_daz':
rsbac/adf/daz/dazuko_rsbac.c:842: error: 'struct rsbac_dev_desc_t' has no member named 'id'
make[3]: * [rsbac/adf/daz/dazuko_rsbac.o] Error 1
make[2]: * [rsbac/adf/daz] Error 2
make[1]: * [rsbac/adf] Error 2
make: * [rsbac] Error 2
################################################################

I use Dazuko 2.1.1 . I have make ./configure and copy it to "linux/rsbac/adf/daz/". I thing I have the same output with 2.2.0

Can anybody help me ?

Thanks a lot

Frank

Frank wegmann <furrama>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ogman (Updated the item)
  •  

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2011-03-19 ogman Assigned toogman None
    2006-04-10 ogman Assigned toNone ogman

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code