PERFORCE change 42971 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=42971

Change 42971 by rwatson at rwatson_powerbook on 2003/11/23 12:08:53

	Renumber sections, explain some steps, remove sysctl step since
	it seems unnecessary currently.

Affected files ...

.. //depot/projects/trustedbsd/sedarwin/bootstrap_instructions.txt#18 edit

Differences ...

==== //depot/projects/trustedbsd/sedarwin/bootstrap_instructions.txt#18 (text+ko) ====

@@ -162,7 +162,7 @@
     make ; sudo make install
     cd ..
 
-Step 9: Build, Install wslogin and WindowServer wrapper
+Step 10: Build, Install wslogin and WindowServer wrapper
 
   In order to allow users to select roles during GUI login, you must
   install our WindowServer wrapper.  This will cause a dialog box
@@ -188,7 +188,7 @@
     sudo make install-window-server-wrapper
     cd ../..
 
-Step 9: Build SEDarwin Sample Policy
+Step 11: Build SEDarwin Sample Policy
 
   We provide a minimal sample policy; due to current limitations in loading the
   policy at boot-time, we link the sample policy directly into the Darwin kernel
@@ -206,7 +206,7 @@
   Until we have this fixed, remember that when you change the policy, you need
   to re-install and remake the XNU kernel.
 
-Step 10: Build XNU
+Step 12: Build XNU
 
   NOTE: If you skipped the long and tedious elements of Step 2 above,
   the chances are good this step will fail with a variety of hard to
@@ -254,41 +254,49 @@
 
     sudo cp /mach_kernel /mach_kernel.safe
 
-Step 10: Build, Install "Libkvm"
+Step 13: Build, Install "Libkvm"
+
+  This will make sure that ps and related commands can read the new layout
+  of kernel memory due to changes in the size of kernel structures such
+  as processes and credentials.
 
     cd apsl/Libkvm
     make ; sudo make install
     cd ../..
 
-Step 11: Build, Install "file_cmds"
+Step 14: Build, Install "file_cmds"
+
+  This will build commands like ls with MAC label support.
 
     cd apsl/file_cmds
     make ; sudo make install
     cd ../..
 
-Step 12: Build, Install "system_cmds"
+Step 15: Build, Install "adv_cmds"
 
-    cd apsl/system_cmds
-    make ; sudo make install
-    cd ../..
+  This will build commands like ps with MAC label support.
 
-Step 10: Build, Install "adv_cmds"
-
     cd other/adv_cmds
     make ; sudo make install
     cd ../..
 
-Step 13: Create extended attribute backing files
+Step 16: Create extended attribute backing files
+
+  This will allocate storage space for MAC labels on the root file system.
+  You may wish to run similar commands on other file systems.  Replace the
+  "/" in this command with the root of the file systme in question, and
+  insert the same directory in front of "/.attribute/system/sebsd" to
+  store the attributes in that file system.
 
     extattrctl initattr -p / 256 /.attribute/system/sebsd
 
-Step 14: Install mac.conf
+Step 17: Install mac.conf
 
     cd etc
     make ; sudo make install
     cd ..
 
-Step 15: Reboot
+Step 18: Reboot
 
   At this point, you should now have a new Darwin kernel, support libraries,
   command line tools, and configuration files installed.  Reboot.