|
Chris PeBenito |
8e0ef1 |
########################################
|
|
Chris PeBenito |
8e0ef1 |
#
|
|
Chris PeBenito |
8e0ef1 |
# Policy build options
|
|
Chris PeBenito |
8e0ef1 |
#
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
8e0ef1 |
# Policy version
|
|
Chris PeBenito |
8e0ef1 |
# By default, checkpolicy will create the highest
|
|
Chris PeBenito |
8e0ef1 |
# version policy it supports. Setting this will
|
|
Chris PeBenito |
8e0ef1 |
# override the version. This only has an
|
|
Chris PeBenito |
8e0ef1 |
# effect for monolithic policies.
|
|
Chris PeBenito |
8e0ef1 |
#OUTPUT_POLICY = 18
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
8e0ef1 |
# Policy Type
|
|
Chris PeBenito |
350b6a |
# standard, mls, mcs
|
|
Chris PeBenito |
350b6a |
TYPE = standard
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
8e0ef1 |
# Policy Name
|
|
Chris PeBenito |
8e0ef1 |
# If set, this will be used as the policy
|
|
Chris PeBenito |
8e0ef1 |
# name. Otherwise the policy type will be
|
|
Chris PeBenito |
8e0ef1 |
# used for the name.
|
|
Chris PeBenito |
8e0ef1 |
NAME = refpolicy
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
8e0ef1 |
# Distribution
|
|
Chris PeBenito |
8e0ef1 |
# Some distributions have portions of policy
|
|
Chris PeBenito |
8e0ef1 |
# for programs or configurations specific to the
|
|
Chris PeBenito |
8e0ef1 |
# distribution. Setting this will enable options
|
|
Chris PeBenito |
8e0ef1 |
# for the distribution.
|
|
Chris PeBenito |
2f1a8f |
# redhat, gentoo, debian, suse, and rhel4 are current options.
|
|
Chris PeBenito |
8e0ef1 |
# Fedora users should enable redhat.
|
|
Chris PeBenito |
cb1d1e |
#DISTRO = redhat
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
8acfcb |
# Unknown Permissions Handling
|
|
Chris PeBenito |
8acfcb |
# The behavior for handling permissions defined in the
|
|
Chris PeBenito |
8acfcb |
# kernel but missing from the policy. The permissions
|
|
Chris PeBenito |
8acfcb |
# can either be allowed, denied, or the policy loading
|
|
Chris PeBenito |
8acfcb |
# can be rejected.
|
|
Chris PeBenito |
8acfcb |
# allow, deny, and reject are current options.
|
|
Chris PeBenito |
8acfcb |
#UNK_PERMS = deny
|
|
Chris PeBenito |
8acfcb |
|
|
Chris PeBenito |
8e0ef1 |
# Direct admin init
|
|
Chris PeBenito |
8e0ef1 |
# Setting this will allow sysadm to directly
|
|
Chris PeBenito |
8e0ef1 |
# run init scripts, instead of requring run_init.
|
|
Chris PeBenito |
8e0ef1 |
# This is a build option, as role transitions do
|
|
Chris PeBenito |
8e0ef1 |
# not work in conditional policy.
|
|
Chris PeBenito |
2d54b8 |
DIRECT_INITRC=n
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
8e0ef1 |
# Build monolithic policy. Putting n here
|
|
Chris PeBenito |
8e0ef1 |
# will build a loadable module policy.
|
|
Chris PeBenito |
8e0ef1 |
MONOLITHIC=y
|
|
Chris PeBenito |
8e0ef1 |
|
|
Chris PeBenito |
e070dd |
# Number of MLS Sensitivities
|
|
Chris PeBenito |
e070dd |
# The sensitivities will be s0 to s(MLS_SENS-1).
|
|
Chris PeBenito |
e070dd |
# Dominance will be in increasing numerical order
|
|
Chris PeBenito |
e070dd |
# with s0 being lowest.
|
|
Chris PeBenito |
e070dd |
MLS_SENS=16
|
|
Chris PeBenito |
e070dd |
|
|
Chris PeBenito |
e070dd |
# Number of MLS Categories
|
|
Chris PeBenito |
e070dd |
# The categories will be c0 to c(MLS_CATS-1).
|
|
Chris PeBenito |
e070dd |
MLS_CATS=256
|
|
Chris PeBenito |
e070dd |
|
|
Chris PeBenito |
e070dd |
# Number of MCS Categories
|
|
Chris PeBenito |
e070dd |
# The categories will be c0 to c(MLS_CATS-1).
|
|
Chris PeBenito |
e070dd |
MCS_CATS=256
|
|
Chris PeBenito |
e070dd |
|
|
Chris PeBenito |
9b3756 |
# Set this to y to only display status messages
|
|
Chris PeBenito |
9b3756 |
# during build.
|
|
Chris PeBenito |
9b3756 |
QUIET=n
|