Dear Gary,
Thanks a zillion times for your help, the building of the policy works fine now that I have copied the .if file of the submodule to the directory you mentioned! I did not know I was reqired to copy the module's interface file to SELinux's include dirs to make it available for other modules to use.
BTW, I was building my module from within my "policy builder and installer" script using the "traditional" way of: # make -f /usr/share/selinux/devel/Makefile A.pp
Now the build process works, thanks to your suggestion!
Best Regards, János -- Janos SZIGETVARI RHCE, License no. 150-053-692 https://www.redhat.com/rhtapps/verify/?certId=150-053-692
LinkedIn: linkedin.com/in/janosszigetvari E-mail: janos@szigetvari.com, jszigetvari@gmail.com Phone: +36209440412 (Hungary)
__@__˚V˚ Make the switch to open (source) applications, protocols, formats now: - windows -> Linux, iexplore -> Firefox, msoffice -> LibreOffice - msn -> jabber protocol (Pidgin, Google Talk) - mp3 -> ogg, wmv -> ogg, jpg -> png, doc/xls/ppt -> odt/ods/odp
Gary Tierney gary.tierney@gmx.com ezt írta (időpont: 2019. ápr. 3., Sze, 17:14):
On Wed, Apr 03, 2019 at 10:34:08AM +0200, SZIGETVÁRI János wrote:
Could anyone please give me some insight on this?
Thanks a lot!
Hi,
How are you building and installing your policy modules? The interface definitions (.if files) aren't preserved in the compiled policy package, so are typically kept elsewhere. On Fedora this is under /usr/share/selinux/devel/include and its associated subdirectories (which are recursively walked to find .if files when building policy using the refpolicy framework, i.e., the selinux-policy-devel package).
So it should be as simple as copying your .if files to: /usr/share/selinux/devel/include (though the "services" subdir is likely more appropriate).
Thanks, Gary.
Best Regards, János Szigetvári
SZIGETVÁRI János jszigetvari@gmail.com ezt írta (időpont: 2019. márc. 31., V, 13:47):
... snip ...
selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedoraproject.org/archives/list/selinux@lists.fedoraproject.or...