Hello,

Has anyone built or installed SE-android onto a Sumsung Nexus
(or similar) cell phone, using a Gentoo development environment?

http://www.linuxfordevices.com/c/a/News/SE-Android-publicly-released/?kc=LNXDEVNL012612

http://selinuxproject.org/page/SEAndroid

curiously,
James

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06.02.2012 17:25, James wrote:
> Hello,
>
> Has anyone built or installed SE-android onto a Sumsung Nexus (or
> similar) cell phone, using a Gentoo development environment?
>
> http://www.linuxfordevices.com/c/a/News/SE-Android-publicly-released/?kc=LNXDEVNL012612
>
> http://selinuxproject.org/page/SEAndroid
>
> curiously, James
>
>

I don't know, why it shouldn't work. At the moment I'm syncing the
repo, then I'll try it myself.

So long,
Hinnerk
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPMS2aAAoJEJwwOFaNFkYctZsH/1rqTZO40vck58L9lvYoNyex
lIezpocXKINtG37Typ8fAGURzpBhmA0NXaa9yqn/aADbiquXbjYIrqlyRz92hCJS
YDXyrv6F7bVGspKNj+WIL8jtPepjEFGP9feFZm7xQ2cy1uJiXh mJvnvne9mTTlWO
FyHbzKam4N4aumnZAwriGEwUXakoKaOfy0h4bgtwczrQW6rJWz Qj0GeKqmB1kgVj
eFCSktRx3cvUaMamTvQiVGA+Y4NEWZE8yVyZeIi0LnoB5BNL08 t8Ny9Sny2Zady+
WX5+4zdgodpIOPSgTkeBZdoGnY8oqL2xLWvmt1Q8xAdlENUQTv kqXuDutpc8ky4=
=b0rb
-----END PGP SIGNATURE-----

Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:


> > Has anyone built or installed SE-android onto a Sumsung Nexus (or
> > similar) cell phone, using a Gentoo development environment?

> I don't know, why it shouldn't work. At the moment I'm syncing the
> repo, then I'll try it myself.

Ah,
Great news. Which phone will you be writing to?

My small company is due some new cell phones, so
this looked interesting.


thanks,
James

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08.02.2012 15:22, James wrote:
> Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:
>
>
>>> Has anyone built or installed SE-android onto a Sumsung Nexus
>>> (or similar) cell phone, using a Gentoo development
>>> environment?
>
>> I don't know, why it shouldn't work. At the moment I'm syncing
>> the repo, then I'll try it myself.
>
> Ah, Great news. Which phone will you be writing to?
>
> My small company is due some new cell phones, so this looked
> interesting.
>
>
> thanks, James
>
>
I own a Galaxy Nexus - up to now I encountered a bug in finding the
tools.jar of JDK (Google helped here) and a problem due to the fact
that I use hardened for building (TEXTREL, I think). I'll try a stage
3 non hardened chroot later...



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPMojBAAoJEJwwOFaNFkYcvrEIAIKnpXPN7N RO48/hAw9ahvOu
JuNJLaJ+S31aO0fp9SrG1zHJhslvQU5q25/sE5dtlLSWUze/c9fbbp+HMLdNPqCP
ZpFj1ZrNnoJUHX9rT5DtqwlgM2W09MvsSUEXf32VewCRtcrkhQ teTrERvvQ47h+k
geUmvFfMd14tgy8tIOYZjRfpRFkidU/0kMjZKYMnKsLYoiFG3tOqDcOXOZSSH1nU
/V3jex5q2pcRRNSwG4zqktDP+ihmJXbWZJ7e+yF4rpSMWabfqlE A1cmZ8g7MM/r8
gMZ7iE+1Q7w74iA/rM0P3dZf/tbLIyQfQpecECImnPaYQ2UL7qVaFMmquLvZkK8=
=bQBn
-----END PGP SIGNATURE-----

Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:


> I own a Galaxy Nexus - up to now I encountered a bug in finding the
> tools.jar of JDK (Google helped here) and a problem due to the fact
> that I use hardened for building (TEXTREL, I think). I'll try a stage
> 3 non hardened chroot later...

How do you like the G. Nexus so far?
Who is your (cell) service provider?

I'm not sure I posted this link:
http://marc.info/?l=selinux&r=1&b=201201&w=4

Note. Russell Coker (dev for SElinux and SEandroid) is very cool and has
his up and running on Debian (Wheezy). If you get stuck, you can search him out
for help. In my experiences with Russell, he is very friendly and
helpful, particularly on the last "thingy" he is focused on, like
SEandroid.....

thanks for keeping me posted,
James

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08.02.2012 16:23, James wrote:
> Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:
>
>
>> I own a Galaxy Nexus - up to now I encountered a bug in finding
>> the tools.jar of JDK (Google helped here) and a problem due to
>> the fact that I use hardened for building (TEXTREL, I think).
>> I'll try a stage 3 non hardened chroot later...
>
> How do you like the G. Nexus so far? Who is your (cell) service
> provider?
>
> I'm not sure I posted this link:
> http://marc.info/?l=selinux&r=1&b=201201&w=4
>
> Note. Russell Coker (dev for SElinux and SEandroid) is very cool
> and has his up and running on Debian (Wheezy). If you get stuck,
> you can search him out for help. In my experiences with Russell, he
> is very friendly and helpful, particularly on the last "thingy" he
> is focused on, like SEandroid.....
>
> thanks for keeping me posted, James
>
It seems as if I'm not able to setup a proper build-environment with
hardened (due to chroot hardening the chroot isn't an option, either).
I'll try to find time to test it on a non-hardened host or in a vm
(which seems like a bad option, too, due to hardened restrictions).


If I get any further, I'll try to post some updates.

Concerning the phone: I'm very happy with it, as it is. It's a big
upgrade from my old Wildfire.
My cell service provider is Vodafone (Germany).

With kind regards,
Hinnerk

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPNNDQAAoJEJwwOFaNFkYcfdQIAI/xLQkTveIxvRuJw4BYelFr
nQ01IFPla+1mjMu30DWoW7dY4O++tdheRxhKKAz7jEA+e54g8m rxDaIs70bealiP
p0IMRp1OGtxW7hj/BABGk5Gab91iH6aq6BWi7eeEuw47W24UuYUHJHiJiD7GZMiY
/APTZxiaw82xLvfKJz3OEtC9Qiaruf9u4jRKP3GMRqpdG+8fSkX 6zXvO1s8n45H3
gYaMyofIi/9KvC8qIhfrK+ODA+2xloyhV5d2lI5WIoMhgQ77KKC0TseRoGK8 h9vC
68xJnmDnySLBm1RAMIJMFOJ8GIC97HNR/0TJFovo0bQSFBgZerAAFtUn2/aAjkM=
=Xupa
-----END PGP SIGNATURE-----

On Feb 10, 2012 3:13 PM, "Hinnerk van Bruinehsen" <h.v.bruinehsen@fu-berlin.de> wrote:

>

> -----BEGIN PGP SIGNED MESSAGE-----

> Hash: SHA1

>

> On 08.02.2012 16:23, James wrote:

> > Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:

> >

> >

> >> I own a Galaxy Nexus - up to now I encountered a bug in finding

> >> the tools.jar of JDK (Google helped here) and a problem due to

> >> the fact that I use hardened for building (TEXTREL, I think).

> >> I'll try a stage 3 non hardened chroot later...

> >

> > How do you like the G. Nexus so far? Who is your (cell) service

> > provider?

> >

> > I'm not sure I posted this link:

> > http://marc.info/?l=selinux&r=1&b=201201&w=4

> >

> > Note. Russell Coker (dev for SElinux and SEandroid) is very cool

> > and has his up and running on Debian (Wheezy). If you get stuck,

> > you can search him out for help. In my experiences with Russell, he

> > is very friendly and helpful, particularly on the last "thingy" he

> > is focused on, like SEandroid.....

> >

> > thanks for keeping me posted, James

> >

> It seems as if I'm not able to setup a proper build-environment with

> hardened (due to chroot hardening the chroot isn't an option, either).

> I'll try to find time to test it on a non-hardened host or in a vm

> (which seems like a bad option, too, due to hardened restrictions).

>

>

> If I get any further, I'll try to post some updates.

>

> Concerning the phone: I'm very happy with it, as it is. It's a big

> upgrade from my old Wildfire.

> My cell service provider is Vodafone (Germany).

>

> With kind regards,

> Hinnerk

>


There are grsec knobs in sysctl that you can temporarily disable to "weaken" chroot for awhile. aW simple reboot will return these knobs to its default secure settings.


(There's a thread I started when I have trouble doing things in a chroot, and the solution was to temporarily stable done grkernelsec features before going into chroot)


Rgds,

Hinnerk van Bruinehsen <h.v.bruinehsen <at> fu-berlin.de> writes:



> If I get any further, I'll try to post some updates.

Very cool!

thanks for the feedback.


James