PERFORCE change 42968 for review
Robert Watson
rwatson at FreeBSD.org
Sun Nov 23 19:59:39 GMT 2003
http://perforce.freebsd.org/chv.cgi?CH=42968
Change 42968 by rwatson at rwatson_powerbook on 2003/11/23 11:58:55
Say a bit more about how to add a user to the SEBSD policy file.
Wax poetic on the virtues of nvram and Open Firmware.
Affected files ...
.. //depot/projects/trustedbsd/sedarwin/bootstrap_instructions.txt#16 edit
Differences ...
==== //depot/projects/trustedbsd/sedarwin/bootstrap_instructions.txt#16 (text+ko) ====
@@ -195,10 +195,13 @@
(yes, this is just temporary!). When the policy is built, you end up with
a policy.h file that will get copied into the XNU tree for the kernel build.
- XXX: Add yourself to the user list!
+ Our sample policy file ships with three users: root, andrew, and rwatson.
+ Chances are, you'll want to add a line for your own user based on one of
+ those lines.
cd policy
make ; make install
+ cd ..
Until we have this fixed, remember that when you change the policy, you need
to re-install and remake the XNU kernel.
@@ -211,6 +214,36 @@
cd apsl/xnu
make
+ sudo cp BUILD/obj/RELEASE_PPC/mach_kernel /mach_kernel.sedarwin
+ sudo chown root:wheel /mach_kernel.sedarwin
+ sudo chmod 644 /mach_kernel.sedarwin
+ cd ../..
+
+ Once you have a new kernel in place, you'll need to use the nvram
+ command to set that kernel as the active kernel by modifying the
+ bootfile variable:
+
+ % nvram -p | grep boot
+ boot-script
+ boot-file
+ boot-command mac-boot
+ boot-args
+ boot-device mac-io/ata-4 at 1f000/@0:5,\\:tbxi
+ auto-boot? true
+ boot-screen
+ % sudo nvram boot-file=mac-io/ata-4 at 1f00/@0:5,/mach_kernel.sedarwin
+
+ Note that the boot-file variable consists if {bootdevice},{filename},
+ and that the bootdevice is extracted from the more confusing
+ boot-device OF variable as found above.
+
+ As a quick note here: next time you boot, Open Firmware will boot
+ /mach_kernel.sedarwin. You can reset it using the nvram command, or
+ on boot you can press Command-Option-O-F to interactively set OF
+ variables, or press Command-Option-P-R to clear the PRAM in the event
+ of serious problems. Finally, you may want to set the boot-args flag
+ to "-v" to get a text-based boot with console messages, rather than the
+ pretty but less informative Apple logo, etc.
Step 10: Build, Install "Libkvm"
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list