[Fwd: Re: [Dazuko-help] Compilation of dazuko 2.3.5 failed on kernel 2.6.25.5]

[Rhaddamant]

Hi,

sorry about delay but a few hours after previous post received official 
openSUSE 11.0 kernel update 2.6.25.5-1.1 -> 2.6.25.9-0.2 and wanted to 
test it too.

the patch works fine, i did tests with Avira & Klamav.
just 2 remarks:

1. applying the patch gives:

# zcat patch-dazuko-linux-2.6.25.diff.gz | patch -p1
patching file security/dazuko/dazuko_call.h
patching file security/dazuko/dazuko_core.c
patching file security/dazuko/dazuko_core.h
patching file security/dazuko/dazuko_events.h
patching file security/dazuko/dazuko_linux26.c
patching file security/dazuko/dazuko_linux26.h
patching file security/dazuko/dazuko_platform.h
patching file security/dazuko/dazuko_transport.c
patching file security/dazuko/dazuko_transport.h
patching file security/dazuko/dazuko_version.h
patching file security/dazuko/hooks.c
patching file security/dazuko/Kconfig
patching file security/dazuko/Makefile
patching file security/Kconfig
Hunk #1 succeeded at 126 with fuzz 2 (offset 1 line).
The next patch would create the file security/Kconfig.orig,
which already exists!  Assume -R? [n]
Apply anyway? [n]
Skipping patch.
1 out of 1 hunk ignored -- saving rejects to file security/Kconfig.orig.rej
patching file security/Makefile
Hunk #2 succeeded at 16 with fuzz 2.
#

if both questions are answered by default with <Enter> it's ok.

2. Apparmor
i apply the makefiles before and after patching in relation to Apparmor
Apparmor is engaged by default on openSUSE 11.0 fresh installation and 
is recommended for use with some applications, for example 
http://en.opensuse.org/Skype_HOWTO#Security

from tests came clear Apparmor insists to register as first security 
module otherwise fails.
i believe it's a good idea your patch to modify Makefile to something 
like Makefile.proposition where Apparmor rules are placed before 
Dazuko's ones thus ensuring the both will work.

Best Regars,
Ivayllo



-------- Original Message --------
Subject: 	Re: [Dazuko-help] Compilation of dazuko 2.3.5 failed on kernel 
2.6.25.5
Date:   Tue, 08 Jul 2008 20:21:19 +0300
From:   Rhaddamant <address@hidden>
To:     John Ogness <address@hidden>, address@hidden
References: 	<address@hidden> 
<address@hidden> <address@hidden> 
<address@hidden>



John Ogness wrote:
> On 2008-06-26, Gmail Rhaddamant <address@hidden> wrote:
>   
> > i am trying to compile dazuko 2.3.5 into the kernel 2.6.25.5 -
> > opensuse 11.0 x86-64 default kernel
> >     
>
> I've modified the "hooks.c" file from the security/dazuko
> directory. This should work for you. After you patch your kernel, just
> copy this version of "hooks.c" over the one created by the patch.
>
> If you send me the original security/Makefile, then I can create a
> complete and official openSUSE patch.
>
> John Ogness
>
>   
i'll do it now and will report the result.

perhaps you'll be interested in this:
https://bugzilla.novell.com/show_bug.cgi?id=401920

Ivayllo


#
# Makefile for the kernel security code
#

obj-$(CONFIG_KEYS)                      += keys/
subdir-$(CONFIG_SECURITY_SELINUX)       += selinux
subdir-$(CONFIG_SECURITY_DAZUKO)        += dazuko
subdir-$(CONFIG_SECURITY_SMACK)         += smack

# if we don't select a security model, use the default capabilities
ifneq ($(CONFIG_SECURITY),y)
obj-y           += commoncap.o
endif

# Object file lists
obj-$(CONFIG_SECURITY)                  += security.o dummy.o inode.o
# Must precede capability.o in order to stack properly.
obj-$(CONFIG_SECURITY_SELINUX)          += selinux/built-in.o
obj-$(CONFIG_SECURITY_DAZUKO)           += commoncap.o dazuko/built-in.o
obj-$(CONFIG_SECURITY_SMACK)            += commoncap.o smack/built-in.o
obj-$(CONFIG_SECURITY_APPARMOR)         += commoncap.o apparmor/
obj-$(CONFIG_SECURITY_CAPABILITIES)     += commoncap.o capability.o
obj-$(CONFIG_SECURITY_ROOTPLUG)         += commoncap.o root_plug.o

#
# Makefile for the kernel security code
#

obj-$(CONFIG_KEYS)                      += keys/
subdir-$(CONFIG_SECURITY_SELINUX)       += selinux
subdir-$(CONFIG_SECURITY_SMACK)         += smack

# if we don't select a security model, use the default capabilities
ifneq ($(CONFIG_SECURITY),y)
obj-y           += commoncap.o
endif

# Object file lists
obj-$(CONFIG_SECURITY)                  += security.o dummy.o inode.o
# Must precede capability.o in order to stack properly.
obj-$(CONFIG_SECURITY_SELINUX)          += selinux/built-in.o
obj-$(CONFIG_SECURITY_SMACK)            += commoncap.o smack/built-in.o
obj-$(CONFIG_SECURITY_APPARMOR)         += commoncap.o apparmor/
obj-$(CONFIG_SECURITY_CAPABILITIES)     += commoncap.o capability.o
obj-$(CONFIG_SECURITY_ROOTPLUG)         += commoncap.o root_plug.o

#
# Makefile for the kernel security code
#

obj-$(CONFIG_KEYS)                      += keys/
subdir-$(CONFIG_SECURITY_SELINUX)       += selinux
subdir-$(CONFIG_SECURITY_DAZUKO)        += dazuko
subdir-$(CONFIG_SECURITY_SMACK)         += smack

# if we don't select a security model, use the default capabilities
ifneq ($(CONFIG_SECURITY),y)
obj-y           += commoncap.o
endif

# Object file lists
obj-$(CONFIG_SECURITY)                  += security.o dummy.o inode.o
# Must precede capability.o in order to stack properly.
obj-$(CONFIG_SECURITY_APPARMOR)         += commoncap.o apparmor/
obj-$(CONFIG_SECURITY_SELINUX)          += selinux/built-in.o
obj-$(CONFIG_SECURITY_DAZUKO)           += commoncap.o dazuko/built-in.o
obj-$(CONFIG_SECURITY_SMACK)            += commoncap.o smack/built-in.o
obj-$(CONFIG_SECURITY_CAPABILITIES)     += commoncap.o capability.o
obj-$(CONFIG_SECURITY_ROOTPLUG)         += commoncap.o root_plug.o