I think you will find that Stephen was referring to the RPMs:
selinux-policy-targeted-sources-1.17.30-2.110.noarch.rpm checkpolicy-1.17.5-1.i386.rpm
- Mark.
On 3/9/06, Florian Lengyel lengyel@gmail.com wrote:
On 3/8/06, Stephen Smalley sds@tycho.nsa.gov wrote:
On Wed, 2006-03-08 at 12:44 -0500, Florian Lengyel wrote:
Is this the appropriate list to ask about modifying local Selinux policies on Red Hat Enterprise Linux 4? If it is, can someone inform
me what i need to download in order to modify the local Selinux policy? The source and tools to do this don't seem to be included in my installation (following the online Red Hat documentation); perhaps there are appropriate rpms to download in up2date--I don't know what they are, and they do not seem to be mentioned in the online documentation.
If this is not the appropriate list, please let me know.
Thank you for this; you have jogged my memory that I am missing precisely those sources In the /etc/selinux/targeted/policy subdirectory [root@cml policy]# pwd /etc/selinux/targeted/policy
There is a file called policy.18
[root@cml policy]# ls -latrs total 348 332 -rw-r--r-- 1 root root 331417 Mar 8 2005 policy.18 8 drwxr-xr-x 4 root root 4096 Aug 25 2005 .. 8 drwxr-xr-x 2 root root 4096 Aug 25 2005 . [root@cml policy]#
but there is no /etc/selinux/policy/sources subdirectory
The checkpolicy command is present:
[root@cml policy]# pwd /etc/selinux/targeted/policy [root@cml policy]# ls -latrs total 348 332 -rw-r--r-- 1 root root 331417 Mar 8 2005 policy.18 8 drwxr-xr-x 4 root root 4096 Aug 25 2005 .. 8 drwxr-xr-x 2 root root 4096 Aug 25 2005 . [root@cml policy]#
So I am missing the source directory. I wonder if the missing components are downloadable in rpm form...
Look for selinux-policy-targeted-sources. That contains the policy sources. Also look for checkpolicy. That is the policy "compiler".
-- Stephen Smalley National Security Agency
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list