OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Crispin Cowan (crispin_at_wirex.com)
Date: Sat Dec 07 2002 - 20:36:52 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Rick Troxel wrote:

    >I'm stuck in console mode on my personal workstation at home, evidently
    >due to a cascade stemming from a boot time failure to load all the
    >subdomain profiles. Looking at the init.d/subdomain startup script and
    >trying to pipe the three files (I use only the default, dummy domain)
    >individually through /sbin/subdomain_parser (if I recall its pathname
    >accurately) shows the non-zero status derives from
    >/etc/subdomain.d/usr.bin.ldd.
    >
    That could be a bunch of things:

        * Bad syntax in the profile file.
        * Mis-match between the subdomain_parser and the kernel version: the
          parser constructs data structures for the kernel, so if they don't
          match, they don't load. This would be a problem if you updated
          your kernel but not your parser, or vice versa.
        * Lack of root priv. when you run the subdomain_parser. For obvious
          reasons :-) you need root to load profiles, and you cannot load
          profiles from a profile-confined process.

    I'm also puzzled by "stuck in console mode." Profile loading failure
    leaves you without SubDomain protection, but should not otherwise hamper
    normal boot-up or starting X.

    >This file looks normal, and in fact it matches one from a similarly
    >configured machine at work.
    >
    >Any suggestions on what to try next?
    >
    Post more detailed error messages and the relevant portions of your syslog.

    Crispin

    -- 
    Crispin Cowan, Ph.D.
    Chief Scientist, WireX                      http://wirex.com/~crispin/
    Security Hardened Linux Distribution:       http://immunix.org
    Available for purchase: http://wirex.com/Products/Immunix/purchase.html
    			    Just say ".Nyet"
    

    -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

    iD8DBQE98rBL5ZkfjX2CNDARAWFPAKCJF0b+pYCTrpMm4oDwOsZBiFP51wCgzh3U 1epo9dgGFbu5JIU/TuhlLeM= =cuBT -----END PGP SIGNATURE-----

    _______________________________________________ Immunix-users mailing list Immunix-usersmail.wirex.com http://mail.wirex.com/mailman/listinfo/immunix-users