PERFORCE change 42971 for review
Robert Watson
rwatson at FreeBSD.org
Sun Nov 23 20:09:54 GMT 2003
http://perforce.freebsd.org/chv.cgi?CH=42971
Change 42971 by rwatson at rwatson_powerbook on 2003/11/23 12:08:53
Renumber sections, explain some steps, remove sysctl step since
it seems unnecessary currently.
Affected files ...
.. //depot/projects/trustedbsd/sedarwin/bootstrap_instructions.txt#18 edit
Differences ...
==== //depot/projects/trustedbsd/sedarwin/bootstrap_instructions.txt#18 (text+ko) ====
@@ -162,7 +162,7 @@
make ; sudo make install
cd ..
-Step 9: Build, Install wslogin and WindowServer wrapper
+Step 10: Build, Install wslogin and WindowServer wrapper
In order to allow users to select roles during GUI login, you must
install our WindowServer wrapper. This will cause a dialog box
@@ -188,7 +188,7 @@
sudo make install-window-server-wrapper
cd ../..
-Step 9: Build SEDarwin Sample Policy
+Step 11: Build SEDarwin Sample Policy
We provide a minimal sample policy; due to current limitations in loading the
policy at boot-time, we link the sample policy directly into the Darwin kernel
@@ -206,7 +206,7 @@
Until we have this fixed, remember that when you change the policy, you need
to re-install and remake the XNU kernel.
-Step 10: Build XNU
+Step 12: Build XNU
NOTE: If you skipped the long and tedious elements of Step 2 above,
the chances are good this step will fail with a variety of hard to
@@ -254,41 +254,49 @@
sudo cp /mach_kernel /mach_kernel.safe
-Step 10: Build, Install "Libkvm"
+Step 13: Build, Install "Libkvm"
+
+ This will make sure that ps and related commands can read the new layout
+ of kernel memory due to changes in the size of kernel structures such
+ as processes and credentials.
cd apsl/Libkvm
make ; sudo make install
cd ../..
-Step 11: Build, Install "file_cmds"
+Step 14: Build, Install "file_cmds"
+
+ This will build commands like ls with MAC label support.
cd apsl/file_cmds
make ; sudo make install
cd ../..
-Step 12: Build, Install "system_cmds"
+Step 15: Build, Install "adv_cmds"
- cd apsl/system_cmds
- make ; sudo make install
- cd ../..
+ This will build commands like ps with MAC label support.
-Step 10: Build, Install "adv_cmds"
-
cd other/adv_cmds
make ; sudo make install
cd ../..
-Step 13: Create extended attribute backing files
+Step 16: Create extended attribute backing files
+
+ This will allocate storage space for MAC labels on the root file system.
+ You may wish to run similar commands on other file systems. Replace the
+ "/" in this command with the root of the file systme in question, and
+ insert the same directory in front of "/.attribute/system/sebsd" to
+ store the attributes in that file system.
extattrctl initattr -p / 256 /.attribute/system/sebsd
-Step 14: Install mac.conf
+Step 17: Install mac.conf
cd etc
make ; sudo make install
cd ..
-Step 15: Reboot
+Step 18: Reboot
At this point, you should now have a new Darwin kernel, support libraries,
command line tools, and configuration files installed. Reboot.
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list