November 2013 - Arch-general - lists.archlinux.org

[arch-general] SELinux packages status update
by Timothée Ravier 03 Nov '13

03 Nov '13

Hi, I've updated all the SELinux related packages in the AUR. I've changed most packages names to better fit with upstream names and AUR naming policy (selinux-pam -> pam-selinux; selinux-usr-libselinux -> libselinux). I'll keep the old ones a week or two, just in case, then I'll ask for deletion. I've only tested those packages in SELinux _disabled_ mode as currently there aren't any usable policy. I'll be working on this from now on. Status of core packages that requires patches or rebuild: * linux: rebuild. bug opened in the Arch bugtracker; * coreutils: rebuild (links with libselinux); * cronie: rebuild '--with-selinux' flag; * findutils: need SELinux patch, can be upstreamed, but is upstream still alive ? * openssh: rebuild '--with-selinux' flag; * pambase: configuration changes to add pam_selinux.so; * pam: rebuild '--enable-selinux' flag for Linux-PAM, patch for pam_unix2, which only removes a function already implemented in a library elsewhere. Is there an upstream here? I couldn't find one; * psmisc: small patch, already upstream. Will be in version 22.21; * shadow: rebuild '-lselinux' and '--with-selinux' flags; * sudo: rebuild '--with-selinux' flag; * systemd: rebuild '--enable-selinux' flag; * util-linux: rebuild '--with-selinux' flag; Total: 1 rebuild as-is, 8 rebuild with additional flags/config, 3 rebuild with patches required (with one already upstream and two potentially dead upstream). I think this looks good! Suggestions for packages are welcomed as AUR comments or issues on GitHub: https://github.com/Siosm/siosm-selinux A repository with signed packages for x86-64 only is available at http://repo.siosm.fr/siosm-selinux/ (See https://tim.siosm.fr/repositories/ if you need instructions or GPG public key). I'll also update the Arch Wiki SELinux page soon. I'll setup an other repository for the SELinux policy as soon as I have something which can boot in enforcing mode. Cheers, Tim

5 6

[arch-general] Revisit official SELinux support
by Karol Babioch 01 Nov '13

01 Nov '13

Hi, I'm wondering whether there was ever an actual discussion regarding the SELinux support within Arch. I could only find a bug report from September 2012 (see [1]), which was closed by Dave Reisner with kind of a lame comment: "A million times no.". After having dealt with SELinux on a couple of occasions I think that it is real security enhancement worth the initial hassle of setting it up properly (at least in a server environment). Looking into the support for SELinux in Arch I think it is way too messy to be actually used in practice (see [2]). I wouldn't go so far to suggest to enable SELinux by default as proposed in the bug report mentioned above, but I think it would actually make sense to support it - more or less - officially. I'm thinking about a model similar to the one implemented by Debian (see [3]). It basically comes down to installing some default policies and enabling SELinux by running a script. This would, however, require at least the stock kernel to have support for SELinux built-in by default. Are there any technical reasons for this not being the case already? I don't want this to become a discussion about the pros and cons of SELinux (on a desktop system) in general. I'm just wondering whether it would be feasible to implement "official" support for SELinux within Arch. So, if possible, please keep it technical. Best regards, Karol Babioch [1]: https://bugs.archlinux.org/task/31448 [2]: https://wiki.archlinux.org/index.php/SELinux [3]: https://wiki.debian.org/SELinux/Setup

11 16

[arch-general] mplayer2 deprecation
by kendell clark 01 Nov '13

01 Nov '13

hi all Since mplayer2 has been deprecated and moved to the aur, i've been trying to find another console video player that will play videos in full screen. I've tried mplayer and mpv, neither of which seem tow work. Browsing the arch wiki, I see I need kms enabled, so have set radeon.modeset=1 in my grub config file, and added radeon to the modules section of mkinitcpio.conf. After this, videos play, but only after adding fbdev2 to mplayer's config file, and only in a small box on screen, it won't stretch. Can anyone help me find a video player that will work? I have vlc for x, but I don't launch x that often. For now, I've used downgrade to install mplayer2 and it's old version of libquvi. I'll attach my .mplayer/config file for reference. Please note that when I'm using mplayer2, I don't select a video driver, mplayer picks the one that works, so I'm not at all sure which one ut's using. My system has an ati radeon hd4200 graphics card with the xf86-vide-ati package for x. I have no special configuration in x, I simply installed x, xfce, and x vlc, and the videos played. I hope this helps. Thanks Kendell clark

5 9

[arch-general] Wacom CTL480S support
by J. ~marahin M. 01 Nov '13

01 Nov '13

Heyah. I've got an simple question: how does Arch stand with the support for Wacom graphic tablets? Especially the CTL480S version. As I lurked through the forums, it might not be supported in the Kernel yet (~ src: linuxwacom), but they also said that it should've been granted support in mid-october. So my question is - how does it really look right now (and does anyone have *any* experience with that particular model)? My first mail to the list also. ;-) Have a nice day! -- *Humanitee.pl - Hosting dla Ciebie!* <http://humanitee.pl/> Marahin ~ Homespace <http://marahin.pl/> Projectspace (3lab) <http://3lab.re/> Twitter <http://twitter.com/3labMarahin>

2 4