|
Chris PeBenito |
4ef756 |
Reference Policy has a requirement of checkpolicy 1.28. Red Hat
|
|
Chris PeBenito |
4ef756 |
Enterprise Linux 4 and Fedora Core 4 RPMs are available on
|
|
Chris PeBenito |
4ef756 |
the Reference Policy download page at http://serefpolicy.sf.net,
|
|
Chris PeBenito |
4ef756 |
and can be installed thusly:
|
|
Chris PeBenito |
4ef756 |
|
|
Chris PeBenito |
4ef756 |
Red Hat Enterprise Linux 4:
|
|
Chris PeBenito |
4ef756 |
|
|
Chris PeBenito |
4ef756 |
rpm -i libsepol-1.11.7-1.i386.rpm
|
|
Chris PeBenito |
4ef756 |
rpm -U checkpolicy-1.28-4.i386.rpm
|
|
Chris PeBenito |
4ef756 |
|
|
Chris PeBenito |
4ef756 |
Fedora Core 4:
|
|
Chris PeBenito |
4ef756 |
|
|
Chris PeBenito |
4ef756 |
rpm -U libsepol-1.11.7-1.i386.rpm checkpolicy-1.28-4.i386.rpm
|
|
Chris PeBenito |
4ef756 |
|
|
Chris PeBenito |
fedd3c |
To install Reference Policy sources into /etc/selinux/refpolicy/src/policy:
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
make install-src
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
fedd3c |
This will back up a pre-existing source policy to the
|
|
Chris PeBenito |
fedd3c |
/etc/selinux/refpolicy/src/policy.bak directory.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
c767b1 |
If you do not have a modules.conf, one can be generated:
|
|
Chris PeBenito |
c767b1 |
|
|
Chris PeBenito |
c767b1 |
make conf
|
|
Chris PeBenito |
c767b1 |
|
|
Chris PeBenito |
8e0ef1 |
This will create a default modules.conf. Options for the policy
|
|
Chris PeBenito |
8e0ef1 |
build process can be found in build.conf. After installing the policy sources,
|
|
Chris PeBenito |
c767b1 |
the old Make targets have been maintained for the monolithic policy:
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
Local policy development:
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
make policy
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
Compile and install the policy:
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
make install
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
Compile, install, and load the policy:
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
make load
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
Filesystem labeling:
|
|
Chris PeBenito |
337e4a |
|
|
Chris PeBenito |
337e4a |
make relabel
|
|
Chris PeBenito |
337e4a |
make checklabels
|
|
Chris PeBenito |
337e4a |
make restorelabels
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
See the README for more information on available make targets.
|