[opensuse-kernel] TOMOYO for 12.1?
Hi, Folks in #opensuse-security were asking what stops TOMOYO from being enabled in newer kernels. FATE#310292 https://bugzilla.novell.com/show_bug.cgi?id=668381 Not sure what the issue is with enabling it. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
On Sat, Jun 04, 2011 at 12:38:23PM +0200, Marcus Meissner wrote:
Hi,
Folks in #opensuse-security were asking what stops TOMOYO from being enabled in newer kernels.
FATE#310292 https://bugzilla.novell.com/show_bug.cgi?id=668381
Not sure what the issue is with enabling it.
I think originally we just didn't have a user for it, nor the userspace tools, so we didn't enable it, to keep the kernel a bit smaller. If people want it, and will support it (will they?) I don't have an objection to enabling it. thanks, greg k-h -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Greg KH wrote:
I think originally we just didn't have a user for it, nor the userspace tools, so we didn't enable it, to keep the kernel a bit smaller.
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository. Since TOMOYO does not require modification of userland programs, all we need to do is changing the kernel config to CONFIG_SECURITY_TOMOYO=y. That's all.
If people want it, and will support it (will they?) I don't have an objection to enabling it.
So, enable TOMOYO please? -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Hi; On 06/08/2011 01:54 PM, Tetsuo Handa wrote:
Greg KH wrote:
I think originally we just didn't have a user for it, nor the userspace tools, so we didn't enable it, to keep the kernel a bit smaller.
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks! -- Ismail Dönmez - openSUSE Booster SUSE LINUX Products GmbH Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Ismail D■mez wrote:
On 06/08/2011 01:54 PM, Tetsuo Handa wrote:
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks!
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/08/2011 08:00 AM, Tetsuo Handa wrote:
Ismail D■mez wrote:
On 06/08/2011 01:54 PM, Tetsuo Handa wrote:
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks!
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html
Ok. I can enable it. - -Jeff - -- Jeff Mahoney SuSE Labs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk3vusoACgkQLPWxlyuTD7IwOQCePXAfDV/wVzROc588i87axCXS QMYAmwTuzm82423ouS8RaSm2PICDIAPn =vXMK -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Am Wed, 08 Jun 2011 14:09:14 -0400 schrieb Jeff Mahoney <jeffm@suse.de>:
On 06/08/2011 08:00 AM, Tetsuo Handa wrote:
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html
Ok. I can enable it.
While you're at it, could you also enable fscaps? That would fix https://bugzilla.novell.com/show_bug.cgi?id=694550 :-) Thanks, Stefan -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Jeff Mahoney wrote:
On 06/08/2011 08:00 AM, Tetsuo Handa wrote:
Ismail D■mez wrote:
On 06/08/2011 01:54 PM, Tetsuo Handa wrote:
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks!
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html
Ok. I can enable it.
- -Jeff
Thank you. What else do I need to do (other than waiting)? -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 06/19/2011 08:09 AM, Tetsuo Handa wrote:
Jeff Mahoney wrote:
On 06/08/2011 08:00 AM, Tetsuo Handa wrote:
Ismail D■mez wrote:
On 06/08/2011 01:54 PM, Tetsuo Handa wrote:
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks!
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html
Ok. I can enable it.
- -Jeff
Thank you. What else do I need to do (other than waiting)?
Done. Are the TOMOYO packages submitted to be part of 12.1? - -Jeff - -- Jeff Mahoney SUSE Labs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk4DzVUACgkQLPWxlyuTD7JxSACfTKg4dW7UGNH8jhABhgpA5/iY QmUAmwQenc9nyWloNFq+ROIDA+2WA6Nd =m0Cr -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
On 06/24/2011 01:33 AM, Jeff Mahoney wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 06/19/2011 08:09 AM, Tetsuo Handa wrote:
Jeff Mahoney wrote:
On 06/08/2011 08:00 AM, Tetsuo Handa wrote:
Ismail D■mez wrote:
On 06/08/2011 01:54 PM, Tetsuo Handa wrote:
There are users who want to use TOMOYO in SUSE. The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks!
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html
Ok. I can enable it.
- -Jeff
Thank you. What else do I need to do (other than waiting)?
Done.
Are the TOMOYO packages submitted to be part of 12.1?
Marcus just updated tomoyo-tools in Factory. So its all good I assume. Regards. -- Ismail Dönmez - openSUSE Booster SUSE LINUX Products GmbH Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
On Wed, Jun 29, 2011 at 10:06:51AM +0200, Ismail Doenmez wrote:
On 06/24/2011 01:33 AM, Jeff Mahoney wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 06/19/2011 08:09 AM, Tetsuo Handa wrote:
Jeff Mahoney wrote:
On 06/08/2011 08:00 AM, Tetsuo Handa wrote:
Ismail D■mez wrote:
On 06/08/2011 01:54 PM, Tetsuo Handa wrote: >There are users who want to use TOMOYO in SUSE. >The userspace tools package is already available in repository.
Are they available in the Factory? If not please submit them, thanks!
Yes. Available since (at least) openSUSE 11.3. http://lists.opensuse.org/opensuse-commit/2011-01/msg00822.html
Ok. I can enable it.
- -Jeff
Thank you. What else do I need to do (other than waiting)?
Done.
Are the TOMOYO packages submitted to be part of 12.1?
Marcus just updated tomoyo-tools in Factory. So its all good I assume.
Older version was in 11.4 already. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
Ismail Doenmez wrote:
Are the TOMOYO packages submitted to be part of 12.1?
Marcus just updated tomoyo-tools in Factory. So its all good I assume.
Confirmed that the updated tomoyo-tools is available at 12.1 milestone 3. It is all good. Thank you. -- To unsubscribe, e-mail: opensuse-kernel+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-kernel+help@opensuse.org
participants (7)
-
Greg KH -
Ismail Doenmez -
Ismail Dönmez
-
Jeff Mahoney -
Marcus Meissner -
Stefan Seyfried -
Tetsuo Handa