[ale] Does kernel 2.6.20.3 have any apparmor module?
hxsrmeng
hxsrmeng at gmail.com
Thu Nov 1 00:38:51 EDT 2007
This is really a wonderful reply, thank you so much.
I have to build a 2.6.20.3 kernel to try something. So, no other choice.
You really helped me a lot. Thanks again.
On Wed, 2007-10-31 at 17:56 -0400, Steve Hamlin wrote:
> I don't believe that AppArmor itself is included in the default
> kernel.org sources. So, yes, you would need to apply a patch, if you
> are building your own kernel from kernel.org sources.
>
> [ Aside: oh, the days I spent tweaking my gentoo-sources kernel so
> that it was just perfect - not a config option or module that was out
> of place or unnecessary. Not to mention my OCD with -USE flags and
> emerge. 4+ years on a single install, then the HD died. Backup:
> data=yes; install=no. Gave up Gentoo cold-turkey, been Ubuntu now for
> 1-2 years. I feel like I kicked a habit: "Hi, I'm Steve, and I was a
> Gentoo addict" :) ]
>
> AppArmor depends on the Linux Security Module (LSM), which is included
> in the default kernel. But you need to patch it with the AppArmor
> patch. Several vendors patch their distribution kernels: SuSE,
> Ubuntu. Redhat uses a different security policy framework, SELinux
> (which also uses LSM, and might also be maintained outside of Linus'
> tree similar to AppArmor)
>
> There is a more recent patch on the site you noted from October 2007
> (go up one level), but you might want to read the sources to figure
> out what kernel version you can patch that into. For all I know more
> recent AppArmor patches might only apply to kernels more recent than
> 2.6.20.3 (no idea at all).
> ---
>
> Depending on WHY you are building a kernel, you might just be able to
> use the kernel sources for the openSuSE distribution kernel (which is
> already patched with AppArmor), and configure & build that exactly how
> you want.
>
>
> - Steve
>
>
>
> On 10/30/07, hxsrmeng <hxsrmeng at gmail.com> wrote:
> Hi friends,
>
> I am building a 2.6.20.3 kernel on an openSUSE 10.2.
>
> I cannot find the apparmor in the kernel's configuration file.
> When boot
> with the new kernel, it shows that it's failed to load
> apparmor module.
>
> Do I need to apply a patch? May I use the kernel patch at the
> website:
> http://forgeftp.novell.com//apparmor/LKML_Submission-June-07/ ?
>
> Thanks.
>
>
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
>
More information about the Ale
mailing list