|
Chris PeBenito |
fedd3c |
1) Reference Policy make targets:
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
General Make targets:
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
install-src Install the policy sources into
|
|
Chris PeBenito |
fedd3c |
/etc/selinux/NAME/src/policy, where NAME is defined in
|
|
Chris PeBenito |
fedd3c |
the Makefile. If not defined, the TYPE, as defined in
|
|
Chris PeBenito |
fedd3c |
the Makefile, is used. The default NAME is refpolicy.
|
|
Chris PeBenito |
fedd3c |
A pre-existing source policy will be moved to
|
|
Chris PeBenito |
fedd3c |
/etc/selinux/NAME/src/policy.bak.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
conf Regenerate policy.xml, and update/create modules.conf
|
|
Chris PeBenito |
fedd3c |
and booleans.conf. This should be done after adding
|
|
Chris PeBenito |
fedd3c |
or removing modules, or after running the bare target.
|
|
Chris PeBenito |
fedd3c |
If the configuration files exist, their settings will
|
|
Chris PeBenito |
fedd3c |
be preserved. This must be ran on policy sources that
|
|
Chris PeBenito |
fedd3c |
are checked out from the CVS repository before they can
|
|
Chris PeBenito |
fedd3c |
be used.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
clean Delete all temporary files, compiled policies,
|
|
Chris PeBenito |
fedd3c |
and file_contexts. Configuration files are left intact.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
bare Do the clean make target and also delete configuration
|
|
Chris PeBenito |
fedd3c |
files, web page documentation, and policy.xml.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
html Regenerate policy.xml and create web page documentation
|
|
Chris PeBenito |
fedd3c |
in the doc/html directory.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
Make targets specific to modular (loadable modules) policies:
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
base Compile and package the base module. This is the
|
|
Chris PeBenito |
fedd3c |
default target for modular policies.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
modules Compile and package all Reference Policy modules
|
|
Chris PeBenito |
fedd3c |
configured to be built as loadable modules.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
MODULENAME.pp Compile and package the MODULENAME Reference Policy
|
|
Chris PeBenito |
fedd3c |
module.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
Make targets specific to monolithic policies:
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
policy Compile a policy locally for development and testing.
|
|
Chris PeBenito |
fedd3c |
This is the default target for monolithic policies.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
install Compile and install the policy and file contexts.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
load Compile and install the policy and file contexts, then
|
|
Chris PeBenito |
fedd3c |
load the policy.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
enableaudit Remove all dontaudit rules from policy.conf.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
relabel Relabel the filesystem.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
checklabels Check the labels on the filesystem, and report when
|
|
Chris PeBenito |
fedd3c |
a file would be relabeled, but do not change its label.
|
|
Chris PeBenito |
fedd3c |
|
|
Chris PeBenito |
fedd3c |
restorelabels Relabel the filesystem and report each file that is
|
|
Chris PeBenito |
fedd3c |
relabeled.
|