Fred Erickson wrote:

On Jul 21, 2014 8:27 AM, "James B. Byrne" byrnejb@harte-lyne.ca wrote:

...

This is very off topic but, I have no idea where else to ask. We obtained some used Leveno CTO7483 desktop units for experimentation. I

had

...

intended to install CentOS-7 on one of them. As they arrived with a

vendor

...

upgraded Windows 7ProSP1 install without media I decided to pull the disk drive and install onto a spare drive that I installed.

Those of you with any experience with this model computer or its family can tell where this is going.

Basically, the disk drive module for these things is disposable. The HDD is enclosed in a removable caddy but is welded to it. You can only replace the HDD with a pre-mounted HDD in yet another caddy, which item is available only from Leveno.

My question is: Does anyone here know of a source for an after-market caddy that fits these machines ad which allows one to install a standard low profile 3.5 inch SATA HDD? My google-fu has failed in my attempts, but that may> becuse I have no idea how to phrase a search for this

situation.

I have no direct experience with this machine but have found that a wide piece of Velcro will work well sometimes.

I have trouble seeing that working - well, maybe in a workstation; certainly not in a server w/ hot swap bays. The clearances are far too tight.

You said you flexed them out. Consider seeing if there's anywhere to use a self-tapping metal screw.

mark

Frank Cox wrote:

On Mon, 21 Jul 2014 13:26:54 -0400 m.roth@5-cent.us wrote:

...

You said you flexed them out. Consider seeing if there's anywhere to use a self-tapping metal screw.

I wonder if a visit to your friendly local machine shop would be in order.

This one time (at band camp) I had a full-height 10mb IBM hard drive that I wanted to install in a desktop case and there was no mount for it in the case at all. I took the whole thing to a machine shop and the guy there took measurements and made a support bracket in about a half-hour.

<G>

Most folks today don't know what such a business is....

mark

you are an idiot. following up every single email will NEVER remove you from the mailing list.

http://lists.centos.org/mailman/listinfo/centos

and good riddance.

On 07/29/2014 02:50 PM, Juan De Mola wrote:

need to cancel subscription

2014-07-21 12:27 GMT-04:00, James B. Byrne byrnejb@harte-lyne.ca:

...

This is very off topic but, I have no idea where else to ask. We obtained some used Leveno CTO7483 desktop units for experimentation. I had intended to install CentOS-7 on one of them. As they arrived with a vendor upgraded Windows 7ProSP1 install without media I decided to pull the disk drive and install onto a spare drive that I installed.

Those of you with any experience with this model computer or its family can tell where this is going.

Basically, the disk drive module for these things is disposable. The HDD is enclosed in a removable caddy but is welded to it. You can only replace the HDD with a pre-mounted HDD in yet another caddy, which item is available only from Leveno.

My question is: Does anyone here know of a source for an after-market caddy that fits these machines ad which allows one to install a standard low profile 3.5 inch SATA HDD? My google-fu has failed in my attempts, but that may becuse I have no idea how to phrase a search for this situation.

-- *** E-Mail is NOT a SECURE channel *** James B. Byrne mailto:ByrneJB@Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

I am having problems making selinux modules on CentOS 6.

Under CentOS 5, the following procedure works:

Procedure to make an seliux policy named mickey1...

# su - # cd /var/log/audit # rm * # service auditd restart # echo 0 > /selinux/enforce # Do whatever selinux is blocking... # echo 1 > /selinux/enforce # touch /.autorelabel # shutdown -fr now

log back on as root...

# cd /root # mkdir tmp selinux # cd tmp # chcon -R -t usr_t . # ln -s /usr/share/selinux/devel/Makefile . # audit2allow -m mickey1 -i /var/log/audit/audit.log -o mickey1.te # make -f /usr/share/selinux/devel/Makefile # mv filename.te filename.pp ../selinux/ # cd ../selinux # semodule -i filename.pp

This works fine on CentOS 5. I have been doing this on half a dozen servers I support.

Unfortunately, on CentOS 6 I get the following:

# semodule -i mickey1.pp libsepol.link_modules: Tried to link in a non-MLS module with an MLS base. (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed!

Does anyone have any idea what I am doing wrong? How do I get this to work on CentOS 6? I've googled this until I'm blue in the face and can't seem to find the answer.

More info:

# cat /etc/redhat-release CentOS release 6.5 (Final)

# uname -a Linux xyzzy.plugh.net 2.6.32-431.20.5.el6.x86_64 #1 SMP Fri Jul 25 08:34:44 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

# rpm -qa | grep selinux selinux-policy-minimum-3.7.19-231.el6_5.3.noarch libselinux-devel-2.0.94-5.3.el6_4.1.x86_64 selinux-policy-targeted-3.7.19-231.el6_5.3.noarch selinux-policy-doc-3.7.19-231.el6_5.3.noarch libselinux-python-2.0.94-5.3.el6_4.1.x86_64 libselinux-utils-2.0.94-5.3.el6_4.1.x86_64 libselinux-2.0.94-5.3.el6_4.1.i686 selinux-policy-mls-3.7.19-231.el6_5.3.noarch selinux-policy-3.7.19-231.el6_5.3.noarch libselinux-2.0.94-5.3.el6_4.1.x86_64

Thanks,

Harold

On 8/1/2014 10:47 PM, Gardner Bell wrote:

On 1 August 2014 22:33, Harold Pritchett harold@uga.edu wrote:

...

I am having problems making selinux modules on CentOS 6.

Under CentOS 5, the following procedure works:

Procedure to make an seliux policy named mickey1...

# su - # cd /var/log/audit # rm * # service auditd restart # echo 0 > /selinux/enforce # Do whatever selinux is blocking... # echo 1 > /selinux/enforce # touch /.autorelabel # shutdown -fr now

log back on as root...

# cd /root # mkdir tmp selinux # cd tmp # chcon -R -t usr_t . # ln -s /usr/share/selinux/devel/Makefile . # audit2allow -m mickey1 -i /var/log/audit/audit.log -o mickey1.te # make -f /usr/share/selinux/devel/Makefile # mv filename.te filename.pp ../selinux/ # cd ../selinux # semodule -i filename.pp

This works fine on CentOS 5. I have been doing this on half a dozen servers I support.

Unfortunately, on CentOS 6 I get the following:

# semodule -i mickey1.pp libsepol.link_modules: Tried to link in a non-MLS module with an MLS base. (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed!

Does anyone have any idea what I am doing wrong? How do I get this to work on CentOS 6? I've googled this until I'm blue in the face and can't seem to find the answer.

More info:

# cat /etc/redhat-release CentOS release 6.5 (Final)

# uname -a Linux xyzzy.plugh.net 2.6.32-431.20.5.el6.x86_64 #1 SMP Fri Jul 25 08:34:44 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

# rpm -qa | grep selinux selinux-policy-minimum-3.7.19-231.el6_5.3.noarch libselinux-devel-2.0.94-5.3.el6_4.1.x86_64 selinux-policy-targeted-3.7.19-231.el6_5.3.noarch selinux-policy-doc-3.7.19-231.el6_5.3.noarch libselinux-python-2.0.94-5.3.el6_4.1.x86_64 libselinux-utils-2.0.94-5.3.el6_4.1.x86_64 libselinux-2.0.94-5.3.el6_4.1.i686 selinux-policy-mls-3.7.19-231.el6_5.3.noarch selinux-policy-3.7.19-231.el6_5.3.noarch libselinux-2.0.94-5.3.el6_4.1.x86_64

Thanks,

Harold

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Should you maybe recompile the module with the -M switch? *-M,--mls* Enable the MLS/MCS support when checking and compiling the policy module.

Please don't top post... It makes it hard to follow the discussion.

Using this advice, I checked out the Makefile which compiles the module. It uses the file "/etc/selinux/config" to determine the type of module to make. So, I changed:

# This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=enforcing # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=targeted

to

# This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=enforcing # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=mls

ran "make clean" followed by "make" with the following results:

# make Compiling mls spamass-milter module /usr/bin/checkmodule: loading policy configuration from tmp/spamass-milter.tmp /usr/bin/checkmodule: policy configuration loaded /usr/bin/checkmodule: writing binary representation (version 10) to tmp/spamass-milter.mod Creating mls spamass-milter.pp policy package rm tmp/spamass-milter.mod.fc tmp/spamass-milter.mod

Followed by:

# semodule -vi spamass-milter.pp Attempting to install module 'spamass-milter.pp': Ok: return value of 0. Committing changes: libsepol.link_modules: Tried to link in a non-MLS module with an MLS base. (No such file or directory). libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory). semodule: Failed!

# semodule -l | grep spam spamassassin 2.2.0

Still no joy! The make command claims to have made a mls policy package, but the semodule -i command says it's non-MLS.

I'm confused...

Thanks

Harold

On 8/2/2014 12:27 PM, Harold Pritchett wrote:

What is "mls" and where can I find it documented?

I'm not sure but that what I want to do is completely get rid of this "mls" stuff and go back to a simple "targeted" selinux install. If this requires that I re-install the system and somehow get it into "targeted" mode then that's OK. Better now than finding out later after a bunch of other stuff has been installed.

no idea what mls is, but according to the selinux man page, /etc/selinux/$SELINUXTYPE must exist, so if its targeted, its looking in /etc/selinux/targeted. there is no mls subdirectory in my /etc/selinux/

ok, google says mls is 'multi-level security'. and I see there is an rpm in the base/updates repository, selinux-policy-mls, which probably populates the mls subdirectory.