According to the release notes for SLES9/POWER SP3, it should support for apparmour, see http://support.novell.com/techcenter/psdb/55a8d7d751e19d8d0cf8c59cc0cb7d05.h... Now, we have installed all the packages mentioned on that site, but running kernel 2.6.5-7.252-pseries64, there is no trace of the subdomain kernel modules in /lib/modules/2.6.5-7.252-pseries64/kernel/security. Is this a bug, or have we misunderstood something? Regards, Ingvar --
On Wed, Mar 22, Ingvar Hagelund wrote:
Now, we have installed all the packages mentioned on that site, but running kernel 2.6.5-7.252-pseries64, there is no trace of the subdomain kernel modules in /lib/modules/2.6.5-7.252-pseries64/kernel/security.
It is compiled into the kernel in this config. Do you see any lack of functionality, other than modprobe subdomain not working?
* Ingvar Hagelund
Now, we have installed all the packages mentioned on that site, but running kernel 2.6.5-7.252-pseries64, there is no trace of the subdomain kernel modules in /lib/modules/2.6.5-7.252-pseries64/kernel/security.
* Olaf Hering
It is compiled into the kernel in this config. Do you see any lack of functionality, other than modprobe subdomain not working?
Though the kernel subsystem may work in itself, SuSE's infrastructure does not seem to support this configuration, at least not in it's default installation. Yast for one is unable to use this, as it tries to load the module. While Configuring AppAromour from yast, it tells that it is not enabled. Trying to enable it, it gives this error message: This operation generated the following error. Please check your installation and AppArmor profile settings. [ Module subdomain not found.] The same goes for the init script: # rcsubdomain start FATAL: Module subdomain not found. Loading SubDomain module failed - could not start SubDomain failed We tried to just circumvent by copying the dummy module. Doing this, we get one step further, but it seems the kernel also misses support for subdomainfs. # rcsubdomain start Loading SubDomain module done mount: fs type subdomainfs not supported by kernel Mounting subdomainfs on /subdomain failed Ingvar
On Mon, Mar 27, Ingvar Hagelund wrote:
* Ingvar Hagelund
Now, we have installed all the packages mentioned on that site, but running kernel 2.6.5-7.252-pseries64, there is no trace of the subdomain kernel modules in /lib/modules/2.6.5-7.252-pseries64/kernel/security.
* Olaf Hering
It is compiled into the kernel in this config. Do you see any lack of functionality, other than modprobe subdomain not working?
Though the kernel subsystem may work in itself, SuSE's infrastructure does not seem to support this configuration, at least not in it's default installation.
Yeah, great. I will change it to be a module now.
participants (2)
-
Ingvar Hagelund -
Olaf Hering