buildworld failure

[Robert Watson]

On Sun, 9 Mar 2003, Anthony Schneider wrote:

> i was building from either 5.0-RELEASE or -CURRENT as of the time of the
> original email.  I have since reinstalled my whole machine, and i am
> cvsup'ing the mac source now.  if the problem persists, i'll let you
> know.  if there are problems with cvs and perforce repository
> synchronization, is there maybe an anonymous p4 account to sync to? 
> from the trustedbsd web page, it looks like there is not. 

Right now, it's not possible to get anonymous P4 access; if there are
continuing problems with the cvsup10 export of Perforce, please let me
know.  I'm hoping to do another pass of merging of kernel changes from the
MAC branch to the main 5.0-CURRENT tree sometime in the next week.  This
will include some new entry points, and improvements in the Biba and MLS
policies.

We're hopeful to produce a first broad-distribution version of the SEBSD
FLASK/TE module sometime in the month of April.  SEBSD relies on fairly
extensive userland tweaks, however, which won't be merged into the main
FreeBSD tree until we've reconciled differences in the label management
approaches for the existing modules and SEBSD.  One of the challenges is
that the existing TrustedBSD modules rely on explicit modification of
labels using mac_set_proc(), whereas SEBSD tends to rely on transition of
the label at exec-time using mac_execve().  We don't yet have an
extensible user space model to handle generating those labels in a
policy-agnostic manner.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org      Network Associates Laboratories


To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message