How to make SELinux in Fedora work?

[Park Lee]

Hi,
 
I've downloaded Fedora Core 2 from http://fedora.redhat.com/download/, and have
installed it successfully.
 
When I type  the command: ls -Z. 
The command failed, and FC2 send me a message on screen that this command can only be run
on SELinux core.
 
Then , I want to ask how to run SELinux which is integrated into Fedora Core? Is there
some resources about what to do and how to do ?
 
And  Is there any differences between it and the SELinux from
http://www.nsa.gov/selinux/code/download5.cfm. As i know ,when we want to run the SELinux
from ttp://www.nsa.gov/selinux/code/download5.cfm.we should first recompile the kernel
with certain options, then install some applications (such as checkpolicy, libselinux)
from the SELinux Full Userland Archive to the system. Then , if we want to run the SELinux
that is integrated into Fedora Core, should we do the same steps? 
 
Thank you very much for your help!
 
Yours, 
Park Lee
2004-05-27
 

		
---------------------------------
Do you Yahoo!?
Friends.  Fun. Try the all-new Yahoo! Messenger

[Richard Hally]

park lee wrote:

>  Hi,
>   
>  I've downloaded Fedora Core 2 from http://fedora.redhat.com/download/, 
>  and have installed it successfully.
>   
>  When I type  the command: ls -Z.
>  The command failed, and FC2 send me a message on screen that this 
>  command can only be run on SELinux core.
>   
>  Then , I want to ask how to run SELinux which is integrated into Fedora 
>  Core? Is there some resources about what to do and how to do ?
>   
>  And  Is there any differences between it and the SELinux from 
>  http://www.nsa.gov/selinux/code/download5.cfm. As i know ,when we want 
>  to run the SELinux from ttp://www.nsa.gov/selinux/code/download5.cfm 
>  <http://www.nsa.gov/selinux/code/download5.cfm>.we should first 
>  recompile the kernel with certain options, then install some 
>  applications (such as checkpolicy, libselinux) from the SELinux Full 
>  Userland Archive 
>  <http://www.nsa.gov/selinux/archives/selinux-usr-2004051217.tgz> to the 
>  system. Then , if we want to run the SELinux that is integrated into 
>  Fedora Core, should we do the same steps?
>   
>  Thank you very much for your help!
>   
>  Yours,
>  Park Lee
>  2004-05-27
>   
>  
>  ------------------------------------------------------------------------
>  Do you Yahoo!?
>  Friends. Fun. Try the all-new Yahoo! Messenger 
>  <http://messenger.yahoo.com/>
>  
>  
>  ------------------------------------------------------------------------
>  
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  http://www.redhat.com/mailman/listinfo/fedora-selinux-list 

Here is a link to the FAQ to get you started:
http://people.redhat.com/kwade/selinux/fc2test2-selinux-rn-en/selinux-faq...

Hope This Helps,
Richard Hally

[Park Lee]

Richard Hally <rhally(a)mindspring.com&gt; wrote:park lee wrote:

>  Hi,
>  
>  I've downloaded Fedora Core 2 from http://fedora.redhat.com/download/, 
>  and have installed it successfully.
>  
>  When I type the command: ls -Z.
>  The command failed, and FC2 send me a message on screen that this 
>  command can only be run on SELinux core.
>  
>  Then , I want to ask how to run SELinux which is integrated into Fedora 
>  Core? Is there some resources about what to do and how to do ?
>  
>  And Is there any differences between it and the SELinux from 
>  http://www.nsa.gov/selinux/code/download5.cfm. As i know ,when we want 
>  to run the SELinux from ttp://www.nsa.gov/selinux/code/download5.cfm 
>  .we should first 
>  recompile the kernel with certain options, then install some 
>  applications (such as checkpolicy, libselinux) from the SELinux Full 
>  Userland Archive 
>  to the 
>  system. Then , if we want to run the SELinux that is integrated into 
>  Fedora Core, should we do the same steps?
>  
>  Thank you very much for your help!
>  
>  Yours,
>  Park Lee
>  2004-05-27
>  
>  
>  ------------------------------------------------------------------------
>  Do you Yahoo!?
>  Friends. Fun. Try the all-new Yahoo! Messenger 
>  
>  
>  
>  ------------------------------------------------------------------------
>  
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  http://www.redhat.com/mailman/listinfo/fedora-selinux-list 

Here is a link to the FAQ to get you started:
http://people.redhat.com/kwade/selinux/fc2test2-selinux-rn-en/selinux-faq...

Hope This Helps,
Richard Hally


--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-selinux-list

		
---------------------------------
Do you Yahoo!?
Friends.  Fun. Try the all-new Yahoo! Messenger

[Stephen Smalley]

On Thu, 2004-05-27 at 02:44, park lee wrote:
>  I've downloaded Fedora Core 2 from
> http://fedora.redhat.com/download/,
>  and have installed it successfully. 
As noted in the release notes for FC2
(http://fedora.redhat.com/docs/release-notes/), you have to pass
"selinux" to the installer to enable SELinux at install time.
 
>  Then , I want to ask how to run SELinux which is integrated into
>  Fedora Core? Is there some resources about what to do and how to do ? 
If you didn't enable SELinux at install time, then you'll need to
install a policy (yum install policy policy-sources), create or edit
/etc/sysconfig/selinux and set SELINUX=permissive in it, and relabel
your filesystems (via fixfiles relabel).  Once you get your filesystems
labeled and have verified that you can boot without avc denials in your
logs, you can set SELINUX=enforcing in /etc/sysconfig/selinux.

>  And  Is there any differences between it and the SELinux from
>  http://www.nsa.gov/selinux/code/download5.cfm. As i know ,when we want
>  to run the SELinux from
>  ttp://www.nsa.gov/selinux/code/download5.cfm.we should first recompile
>  the kernel with certain options, then install some applications (such
>  as checkpolicy, libselinux) from the SELinux Full Userland Archive to
>  the system. Then , if we want to run the SELinux that is integrated
>  into Fedora Core, should we do the same steps? 
Fedora Core 2 already includes the SELinux code in the kernel and
applications, so you don't have to recompile anything.  You just need to
enable the SELinux support that is already there.

-- 
Stephen Smalley <sds(a)epoch.ncsc.mil&gt;
National Security Agency

[Park Lee]

Dear sir,
Thank you very much!
I think I've learned a lot with you help.
 
there are some other questions: 
What is the version of the Fedora Core 2 SELinux? 
When an updated public release of SELinux was made available on
http://www.nsa.gov/selinux/,  how can I do to also updated the Fedora Core 2 SELinux?
 
Thanks again.
 
Yours,
Park Lee
2004-05-27
 

		
---------------------------------
Do you Yahoo!?
Friends.  Fun. Try the all-new Yahoo! Messenger