<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div apple-content-edited="true" class=""><div class="">Tested on Fedora 21 using kernel 3.18.3 and there is nothing wrong with LSM. Please make sure your hello world was compiled and built-in.</div><div class="">Yes, LSM now only support built-in, not module.</div><div class=""><br class=""></div><div class="">-daveti</div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Jan 20, 2015, at 3:43 AM, Thomas F. J.-M. Pasquier <<a href="mailto:tfjmp2@cam.ac.uk" class="">tfjmp2@cam.ac.uk</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">Hi,<br class=""><br class="">I am able to re-build with SELinux now and that's working (using config from /boot/). However, when building with helloworld LSM it does not seem to be working. I can indeed see the "Security Framework initialized", but none of the printk present in my module. I will be doing more test today.<div class=""><br class=""></div><div class="">I think LSM should not appear in <span style="line-height:19.7999992370605px" class="">modprobe as they are not loaded anymore. Am I missing something or is this correct?</span><br class=""><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Thomas</div><br class=""><div class="gmail_quote">On Mon Jan 19 2015 at 3:45:15 PM Dave Tian <<a href="mailto:dave.jing.tian@gmail.com" target="_blank" class="">dave.jing.tian@gmail.com</a>> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">LSM does not support dynamic module loading now.<br class="">
<br class="">
I have tried to create a new LSM based on yama and boot it as the default on my Ubuntu 14.04 (kernel 3.13). It works smoothly. I have NOT tried Fedora with kernel 3.18 yet but I do not think there would be some changes breaking LSM, which has been there for years…Would you please recheck your Kconfig and Makefile? At least, you should see the logging “Security Framework initialized" from dmesg, saying the LSM is init’d, after which your LSM should be loaded presumably.<br class="">
<br class="">
-daveti<br class="">
<br class="">
> On Jan 18, 2015, at 9:33 PM, <a href="mailto:Valdis.Kletnieks@vt.edu" target="_blank" class="">Valdis.Kletnieks@vt.edu</a> wrote:<br class="">
><br class="">
> On Sun, 18 Jan 2015 23:49:31 +0000, "Thomas F. J.-M. Pasquier" said:<br class="">
><br class="">
>> I am trying to build a skeleton LSM module, but I am not having much luck<br class="">
>> so far. The problem seems to be that the LSM init function is never called.<br class="">
><br class="">
> What does 'modprobe' report? Anything in dmesg?<br class="">
> ______________________________<u class=""></u><u class=""></u>_________________<br class="">
> Kernelnewbies mailing list<br class="">
> <a href="mailto:Kernelnewbies@kernelnewbies.org" target="_blank" class="">Kernelnewbies@kernelnewbies.<u class=""></u>or<u class=""></u>g</a><br class="">
> <a href="http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies" target="_blank" class="">http://lists.kernelnewbies.<u class=""></u>org<u class=""></u>/mailman/listinfo/<u class=""></u>kernelnewbie<u class=""></u>s</a><br class="">
<br class="">
</blockquote></div></div>
</div></blockquote></div><br class=""></body></html>