On 11/09/2016 08:54 PM, Jeff Becker wrote:
Hi. I successfully compiled and loaded the following policy file on RHEL7 with the latest (as of yesterday) SELinux rpms. However, when I run "seinfo -tfoo_t -x", I don't see ubac_constrained_type listed in the attributes. How do I enable UBAC? Thanks.
Hi Jeff, we don't build Fedora/RHEL distribution policy with UBAC support. You would need to rebuild the policy from srpms to enable it.
What is your intention with UBAC?
-jeff
policy_module(foo, 1.0.0)
######################################## # # Declarations # userdom_unpriv_user_template(foo)
######################################## # # foo local policy #
domain_use_interactive_fds(foo_t)
files_read_etc_files(foo_t)
miscfiles_read_localization(foo_t)
ubac_constrained(foo_t)
selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org