Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Guidance needed to setup SELinux
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
kgdrenefort
Apprentice
Apprentice


Joined: 19 Sep 2023
Posts: 226
Location: Somewhere in the 77

PostPosted: Wed May 08, 2024 11:19 am    Post subject: Guidance needed to setup SELinux Reply with quote

Hello,

Some informations:

- Profile:
Code:
[44]  default/linux/amd64/23.0/hardened/selinux/systemd (stable) *


- Kernel:
Code:
6.6.28-gentoo-dist-hardened


- Current status of SELinux:
Code:
Mephistopheles ~ # sestatus
SELinux status:                 disabled


I installed my system from this profile, so it's with hardened and selinux, on systemd.

I read a bit about how works SELinux and how to properly enables it. By mostly following this page.

Even if my system was already installed with a SELinux profile, I did not find another page on the wiki fitting my needs.

I followed all the step until first reboot, the permissions for SELinux is set to permissive and the type is mcs, as recommanded on the wiki.

Now I have to mount my root with a bind to /mnt/gentoo and sets label, first «error» is about this:

Code:
Mephistopheles ~ # setfiles -r /mnt/gentoo /etc/selinux/mcs/contexts/files/file_contexts.subs_dist /mnt/gentoo/{dev,efi,proc,run,sys,tmp}
Warning no default label for /dev
Warning no default label for /efi
Warning no default label for /proc
Warning no default label for /run
Warning no default label for /sys
Warning no default label for /tmp


From this point, I do not know if it matters, if it's just informative, etc.

Then, I try to keep going:

Code:
Mephistopheles ~ # umount /mnt/gentoo
Mephistopheles ~ # semanage fcontext -a -t swapfile_t "/swapfile"
libsemanage.semanage_read_policydb: Could not open kernel policy /var/lib/selinux/mcs/active/policy.kern for reading. (No such file or directory).
FileNotFoundError: No such file or directory


I guess my newly installed policy types (which was not present if I remember correctly before following the wiki's page) is missing something.

Code:

Mephistopheles ~ # ls /var/lib/selinux/
final  mcs  strict  targeted

Code:
Mephistopheles ~ # ls /var/lib/selinux/mcs/*/*/*
/var/lib/selinux/mcs/tmp/modules/400:
application  bootloader   cron     getty     iptables    logging    modutils  netutils  raid         setrans  storage  sysnetwork  udev        usermanage
authlogin    clock        dmesg    hostname  libraries   lvm        mount     nscd      rsync        ssh      su       systemd     unprivuser  xdg
base         consoletype  fstools  init      locallogin  miscfiles  mta       portage   selinuxutil  staff    sysadm   tmpfiles    userdomain

/var/lib/selinux/mcs/tmp/modules/disabled


While the default policy type, already available from scratch on my system:

Code:
Mephistopheles ~ # ls /var/lib/selinux/strict/*/*/*
/var/lib/selinux/strict/active/modules/400:
accountsd    avahi       clock        dbus       dnsmasq  gpg       kerberos    lpd         modemmanager  netutils        portage     raid         slocate  sysadm       udev        xdg
acpi         base        colord       devicekit  dracut   gpm       libraries   lvm         modutils      networkmanager  ppp         rsync        ssh      sysnetwork   unprivuser  xfs
apache       bluetooth   consoletype  dirmngr    fstools  hostname  loadkeys    makewhatis  mount         nscd            pulseaudio  selinuxutil  staff    systemd      userdomain  xserver
application  bootloader  cron         dmesg      getty    init      locallogin  mandb       mozilla       ntp             qemu        sensord      storage  thunderbird  usermanage
authlogin    chronyd     cups         dmidecode  git      iptables  logging     miscfiles   mta           policykit       radvd       setrans      su       tmpfiles     virt

/var/lib/selinux/strict/active/modules/disabled


Since it's seems interesting in this context, this is how is mounted my partitions and such:

Code:
/dev/sda2 on / type xfs (rw,relatime,lazytime,attr2,inode64,logbufs=8,logbsize=32k,noquota)
devtmpfs on /dev type devtmpfs (rw,nosuid,size=4096k,nr_inodes=2032384,mode=755,inode64)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,inode64)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000)
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot)
pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
efivarfs on /sys/firmware/efi/efivars type efivarfs (rw,nosuid,nodev,noexec,relatime)
bpf on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)
configfs on /sys/kernel/config type configfs (rw,nosuid,nodev,noexec,relatime)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run type tmpfs (rw,nosuid,nodev,size=3259592k,nr_inodes=819200,mode=755,inode64)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=32,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=13362)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,nosuid,nodev,relatime,pagesize=2M)
mqueue on /dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)
debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,relatime)
tracefs on /sys/kernel/tracing type tracefs (rw,nosuid,nodev,noexec,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,nosuid,nodev,noexec,relatime)
tmpfs on /tmp type tmpfs (rw,nosuid,nodev,size=8148980k,nr_inodes=1048576,inode64)
/dev/sda1 on /efi type vfat (rw,relatime,fmask=0077,dmask=0077,codepage=437,iocharset=ascii,shortname=mixed,errors=remount-ro)
/dev/sdc1 on /mnt/data type xfs (rw,relatime,attr2,inode64,logbufs=8,logbsize=32k,noquota)
tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,size=1629792k,nr_inodes=407448,mode=700,uid=1000,gid=1000,inode64)
portal on /run/user/1000/doc type fuse.portal (rw,nosuid,nodev,relatime,user_id=1000,group_id=1000)

Code:
# EFI - /dev/sda1 while installing
PARTUUID=2aec02da-3e09-4bfe-a151-afb1360491fa   /efi   vfat   umask=0077   0 2

# Root - /dev/sda2 while installing
PARTUUID=8fc528f0-c1fe-4df2-9f3c-45340bf50327   /   xfs   defaults,lazytime   0 1

# Home - Non existing while installing
# PARTUUID=   /home   xfs   defaults,lazytime   0 2

# Swap - Non existing while installing
/swapfile   none   swap   sw   0 0

# External Hard Drive (Data, backup, etc)
# PARTUUID=487bcffe-50dd-4edd-8dd6-5431db96e926   /mnt/extData   ext4   defaults   0 0

# Internel (SSD) hard drive (Data, backup, others, etc)
PARTUUID=f867b603-cb5f-414f-b6bd-e3bda2b70511   /mnt/data   xfs   defaults   0 2


And I guess my emerge --info is interesting too:
Code:
Mephistopheles ~ # emerge --info
Portage 3.0.63 (python 3.11.9-final-0, default/linux/amd64/23.0/hardened/selinux/systemd, gcc-13, glibc-2.38-r13, 6.6.28-gentoo-dist-hardened x86_64)
=================================================================
System uname: Linux-6.6.28-gentoo-dist-hardened-x86_64-AMD_Ryzen_5_2600_Six-Core_Processor-with-glibc2.38
KiB Mem:    16297956 total,  13439112 free
KiB Swap:   16777212 total,  16777212 free
Timestamp of repository gentoo: Wed, 08 May 2024 08:30:00 +0000
Head commit of repository gentoo: 98c21ce1e6f630c2898bea40beba145b77bee4f9
sh bash 5.1_p16-r6
ld GNU ld (Gentoo 2.41 p5) 2.41.0
app-misc/pax-utils:        1.3.7::gentoo
app-shells/bash:           5.1_p16-r6::gentoo
dev-build/autoconf:        2.13-r8::gentoo, 2.71-r7::gentoo
dev-build/automake:        1.16.5-r2::gentoo
dev-build/cmake:           3.28.3::gentoo
dev-build/libtool:         2.4.7-r4::gentoo
dev-build/make:            4.4.1-r1::gentoo
dev-build/meson:           1.4.0-r1::gentoo
dev-lang/perl:             5.38.2-r3::gentoo
dev-lang/python:           3.11.9::gentoo, 3.12.3::gentoo
dev-lang/rust-bin:         1.77.1::gentoo
sec-policy/selinux-base:   2.20240226-r1::gentoo
sys-apps/baselayout:       2.15::gentoo
sys-apps/sandbox:          2.38::gentoo
sys-apps/systemd:          255.4::gentoo
sys-devel/binutils:        2.41-r5::gentoo
sys-devel/binutils-config: 5.5::gentoo
sys-devel/clang:           17.0.6::gentoo
sys-devel/gcc:             13.2.1_p20240210::gentoo
sys-devel/gcc-config:      2.11::gentoo
sys-devel/lld:             17.0.6::gentoo
sys-devel/llvm:            17.0.6::gentoo
sys-kernel/linux-headers:  6.6-r1::gentoo (virtual/os-headers)
sys-libs/glibc:            2.38-r13::gentoo
sys-libs/libselinux:       3.6-r1::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    volatile: False
    sync-rsync-verify-max-age: 3
    sync-rsync-verify-jobs: 1
    sync-rsync-extra-opts:
    sync-rsync-verify-metamanifest: yes

Binary Repositories:

gentoobinhost
    priority: 1
    sync-uri: https://distfiles.gentoo.org/releases/amd64/binpackages/23.0/x86-64_hardened

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="@FREE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/var/cache/distfiles"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-march=native -O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg-live config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox selinux sesandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-march=native -O2 -pipe"
GENTOO_MIRRORS="https://mirrors.ircam.fr/pub/gentoo-distfiles/     https://gentoo.mirrors.ovh.net/gentoo-distfiles/     https://mirrors.soeasyto.com/distfiles.gentoo.org/"
LANG="fr_FR.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
LEX="flex"
MAKEOPTS="-j3"
PKGDIR="/var/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
SHELL="/bin/bash"
USE="X a52 aac acl acpi alsa amd64 audit bluetooth branding bzip2 cairo caps cdda cdr cet clamav colord crypt css cups curl cxx dbus dist-kernel dri dts dvd dvdr encode exif fbcon ffmpeg flac fltk gdbm gif gpm gstreamer gtk gui hardened hddtemp iconv icu ipv6 jack jpeg lcms libnotify libtirpc lm-sensors lto lua mad man matroska mng modules modules-compress modules-sign mp3 mp4 mpeg mplayer multilib ncurses networkmanager nls ogg opengl openmp pam pango pcre pdf pic pie png policykit posix ppds profile pulseaudio qt5 readline scanner sdl seccomp selinux sound spell ssl ssp startup-notification svg systemd test-rust tiff truetype udev udisks uefi unicode upower usb vcd vim-syntax vorbis vulkan wxwidgets x264 xattr xcb xft xml xtpax xv xvid zlib" ABI_X86="64" ADA_TARGET="gcc_12" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2 aes avx avx2 f16c fma3 pclmul popcnt rdrand sha sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 ntrip navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="libinput" KERNEL="linux" L10N="fr en" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-1" POSTGRES_TARGETS="postgres15" PYTHON_SINGLE_TARGET="python3_11" PYTHON_TARGETS="python3_11" RUBY_TARGETS="ruby31" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EMERGE_DEFAULT_OPTS, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS


As my make.conf:
Code:
Mephistopheles ~ # cat /etc/portage/make.conf
# These settings were set by the catalyst build script that automatically
# built this stage.
# Please consult /usr/share/portage/config/make.conf.example for a more
# detailed example.
COMMON_FLAGS="-march=native -O2 -pipe"
CFLAGS="${COMMON_FLAGS}"
CXXFLAGS="${COMMON_FLAGS}"
FCFLAGS="${COMMON_FLAGS}"
FFLAGS="${COMMON_FLAGS}"
MAKEOPTS="-j3"

USE="X a52 aac acpi alsa bluetooth branding cairo cdda cdr clamav colord cups css cups curl cxx dbus dist-kernel dri dts dvd dvdr encode exif fbcon ffmpeg flac fltk gdbm gif gpm gtk gui gstreamer hddtemp icu jack jpeg lcms libnotify lm-sensors lto lua mad matroska man modules modules-compress modules-sign mng mp3 mp4 mplayer mpeg networkmanager ogg opengl pango pch pdf png policykit posix profile pulseaudio ppds qt5 readline sdl scanner seccomp sound spell startup-notification svg systemd tiff truetype udisks upower usb vorbis vulkan wxwidgets x264 xcb xft xml xv xvid uefi vcd vim-syntax -gtk-doc -handbook -ibm -ieee1394 -musepack -musicbrainz -nvenc -oracle -pda -plasma -quicktime -samba -screencast -semantic-desktop -smartcard -speech -speex -wayland -geoip -geolocation -gphotos2 -gps -ios -ipod -webkit -wifi"

# SELinux policy types
POLICY_TYPES="mcs"

L10N="fr en"

# POLICY_TYPES="mcs"

# VIDEO_CARDS="nouveau"
VIDEO_CARDS="nvidia"

GRUB_PLATFORMS="efi-64"

ACCEPT_LICENSES="-* @FREE @BINARY-REDISTRIBUTABLE"

# NOTE: This stage was built with the bindist Use flag enabled

# This sets the language of build output to English.
# Please keep this setting intact when reporting bugs.
LC_MESSAGES=C.utf8

GENTOO_MIRRORS="https://mirrors.ircam.fr/pub/gentoo-distfiles/ \
    https://gentoo.mirrors.ovh.net/gentoo-distfiles/ \
    https://mirrors.soeasyto.com/distfiles.gentoo.org/"


And finally, my /etc/selinux/config:
Code:
Mephistopheles ~ # cat /etc/selinux/config
# This file controls the state of SELinux on the system on boot.

# SELINUX can take one of these three values:
#   enforcing - SELinux security policy is enforced.
#   permissive - SELinux prints warnings instead of enforcing.
#   disabled - No SELinux policy is loaded.
SELINUX=permissive
#SELINUX=enforcing

# SELINUXTYPE can take one of these four values:
#   targeted - Only targeted network daemons are protected.
#   strict   - Full SELinux protection.
#   mls      - Full SELinux protection with Multi-Level Security
#   mcs      - Full SELinux protection with Multi-Category Security
#              (mls, but only one sensitivity level)
#SELINUXTYPE=strict
SELINUXTYPE=mcs


And, finally, my packages using selinux USE flag, from what equery thinks (I understood it's not always 100% accurate, so I prefer to say it):
Code:
Mephistopheles ~ # equery hasuse selinux
 * Searching for USE flag selinux ...
[IP-] [  ] app-arch/tar-1.35:0
[IP-] [  ] app-crypt/gnupg-2.4.5:0
[IP-] [  ] app-editors/vim-9.0.2167:0
[IP-] [  ] app-emulation/libvirt-9.8.0-r2:0/9.8.0
[IP-] [  ] app-emulation/qemu-8.2.3:0
[IP-] [  ] app-text/mandoc-1.14.6:0
[IP-] [  ] dev-libs/glib-2.78.3:2
[IP-] [  ] dev-util/ostree-2023.5:0
[IP-] [  ] dev-vcs/git-2.43.2:0
[IP-] [  ] mail-client/thunderbird-115.10.1:0
[IP-] [  ] media-libs/libpulse-17.0:0
[IP-] [  ] media-libs/mesa-24.0.4:0
[IP-] [  ] media-sound/pulseaudio-daemon-17.0-r1:0
[IP-] [  ] media-video/pipewire-1.0.4:0/0.4
[IP-] [  ] net-dialup/ppp-2.5.0-r7:0/2.5.0
[IP-] [  ] net-dns/avahi-0.8-r7:0
[IP-] [  ] net-dns/dnsmasq-2.90:0
[IP-] [  ] net-misc/chrony-4.5:0
[IP-] [  ] net-misc/modemmanager-1.18.12:0/1
[IP-] [  ] net-misc/networkmanager-1.46.0-r1:0
[IP-] [  ] net-misc/openssh-9.6_p1-r3:0
[IP-] [  ] net-misc/radvd-2.19-r5:0
[IP-] [  ] net-print/cups-2.4.7-r2:0
[IP-] [  ] net-wireless/bluez-5.72:0/3
[IP-] [  ] sys-apps/accountsservice-23.13.9:0
[IP-] [  ] sys-apps/bubblewrap-0.8.0:0
[IP-] [  ] sys-apps/coreutils-9.4-r1:0
[IP-] [  ] sys-apps/dbus-1.15.8:0
[IP-] [  ] sys-apps/dmidecode-3.5-r3:0
[IP-] [  ] sys-apps/findutils-4.9.0-r2:0
[IP-] [  ] sys-apps/iproute2-6.6.0-r3:0
[IP-] [  ] sys-apps/kbd-2.6.4:0
[IP-] [  ] sys-apps/lm-sensors-3.6.0-r1:0/5.0.0
[IP-] [  ] sys-apps/man-db-2.12.0:0
[IP-] [  ] sys-apps/mlocate-0.26-r3:0
[IP-] [  ] sys-apps/net-tools-2.10:0
[IP-] [  ] sys-apps/portage-3.0.63:0
[IP-] [  ] sys-apps/sed-4.9:0
[IP-] [  ] sys-apps/shadow-4.14.2:0/4
[IP-] [  ] sys-apps/systemd-255.4:0/2
[IP-] [  ] sys-apps/util-linux-2.39.3-r7:0
[IP-] [  ] sys-auth/pambase-20240128:0
[IP-] [  ] sys-auth/polkit-123:0
[IP-] [  ] sys-fs/lvm2-2.03.22-r5:0
[IP-] [  ] sys-fs/udisks-2.10.1:2
[IP-] [  ] sys-fs/xfsprogs-6.6.0:0
[IP-] [  ] sys-kernel/dracut-060_pre20240104-r4:0
[IP-] [  ] sys-libs/glibc-2.38-r13:2.2
[IP-] [  ] sys-libs/gpm-1.20.7-r6:0
[IP-] [  ] sys-libs/pam-1.5.3-r1:0
[IP-] [  ] sys-power/acpid-2.0.34-r1:0
[IP-] [  ] sys-power/upower-0.99.20:0/3
[IP-] [  ] sys-process/lsof-4.99.3:0
[IP-] [  ] sys-process/procps-3.3.17-r2:0/8
[IP-] [  ] sys-process/psmisc-23.7:0
[IP-] [  ] www-client/firefox-125.0.3:rapid
[IP-] [  ] x11-base/xorg-server-21.1.13:0/21.1.13
[IP-] [  ] x11-libs/libxcb-1.16.1:0/1.12
[IP-] [  ] x11-misc/colord-1.4.7-r1:0/2


And adding that I compile my kernel from gentoo's ebuild without having done any changes, it's Gentoo-Vanilla.

If you need more informations, please ask.

Regards,
GASPARD DE RENEFORT Kévin
_________________
wiki/User:Kgdrenefort/captain_logs My system info
G. does not have problems, only learning opportunities. - NeddyS.
If your installation isn't valuable to you, feel free to continue to ignore the instructions. - figue.
Back to top
View user's profile Send private message
kgdrenefort
Apprentice
Apprentice


Joined: 19 Sep 2023
Posts: 226
Location: Somewhere in the 77

PostPosted: Fri May 10, 2024 12:52 pm    Post subject: Reply with quote

Hello,

I'm allowing myself to up this topic.

After speaking into #gentoo-wiki@libera.chat I confirm there is no page to start from an already installed SELinux system.

The documentation should be enough tho, will consider it's me then.

Will try to get back to it this week-end.

Regards,
GASPARD DE RENEFORT Kévin
_________________
wiki/User:Kgdrenefort/captain_logs My system info
G. does not have problems, only learning opportunities. - NeddyS.
If your installation isn't valuable to you, feel free to continue to ignore the instructions. - figue.
Back to top
View user's profile Send private message
kgdrenefort
Apprentice
Apprentice


Joined: 19 Sep 2023
Posts: 226
Location: Somewhere in the 77

PostPosted: Sun May 12, 2024 3:39 pm    Post subject: Reply with quote

Hello,

Trying to keep going on this subject, I created this post (Building kernel error: Cannot find module directory).

I suppose that is a step I need and did not took care before, can be related to my issue in this actual topic.

Regards,
GASPARD DE RENEFORT Kévin
_________________
wiki/User:Kgdrenefort/captain_logs My system info
G. does not have problems, only learning opportunities. - NeddyS.
If your installation isn't valuable to you, feel free to continue to ignore the instructions. - figue.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum