Arch Linux

xy

Member

Registered: 2015-04-08

Posts: 16

Can't get tomoyo (AUR repo linux-tomoyo) to work

Hey there,

I've got a little problem with tomoyo.

I first tried to install the tomoyo-tools -> Missing dependency: linux-tomoyo.
Then I read that tomoyo is already inbuilt in Linux kernel, but disabled by default.
So I tried to change this setting - made my own custom kernel.. Wow, til I found a more or less easy way that worked, by following this guide, hours passed by. So I made it, added the single line to the config.x86_64 (I read this should be enough somewhere on the official tomoyo site) and to be safe, to the config file too: CONFIG_SECURITY_TOMOYO=y
After completing the makepkg (I didn't choose tomoyo as default security system), I installed it, said my bootloader what to do (first without any special APPENDS, then, because this didnt work, with this appended: "security=tomoyo TOMOYO_trigger=/usr/lib/systemd/systemd". With this appends, the custom kernel didn't start anymore (don't know the exact error anymore, but it was not very informative and I used an easier solution either way). So I removed the new kernel and searched further... Until I found an illusive very easy solution - the AUR linux-tomoyo... Why I didn't look earlier for this AUR?

Well this AUR tarball downloaded, bla bla.. But installation didnt work too. Everything was fine, extracting sources did work, but then...

================================================
==> Begin prepare()...
patching file Documentation/stable_kernel_rules.txt
patching file Makefile
....
....
patching file arch/x86/boot/compressed/efi_stub_64.S
The next patch would create the file arch/x86/boot/compressed/efi_thunk_64.S,
which already exists!  Assume -R? [n]
Apply anyway? [n]
Skipping patch.
1 out of 1 hunk ignored
patching file arch/x86/include/asm/spinlock.h
....
....
patching file tools/perf/util/cloexec.c
==> ERROR: An error occured in prepare().
    Aborting...
================================================

So, I didn't found anything to this topic anymore and can't help myself now.  I hope you have some hints for me?

Background: I wanted to use skype, read the wiki page and found infos about securing skype. Sounded good. Among others, tomoyo seemed really nice...

Of course, it would be enough, to secure skype theoretically, but now I want tomoyo to work

Thank you for help!

xy