rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

update on targeted config

Browse Source
This commit is contained in:
Chris PeBenito 2005-09-22 19:11:59 +00:00
parent 48558667c0
commit 5561135dd2
1 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
www/html/switch.html
View File

@ -15,7 +15,7 @@
</p> </p>
<div id="codeblock"> <div id="codeblock">
<pre> <pre>
# <b>tar -jxvf refpolicy-20050802.tar.bz2 -C /tmp</b> # <b>tar -jxvf refpolicy-20050922.tar.bz2 -C /tmp</b>
# <b>cd /tmp/refpolicy</b> # <b>cd /tmp/refpolicy</b>
# <b>make install-src</b> # <b>make install-src</b>
</pre> </pre>
@ -26,19 +26,17 @@
<p> <p>
The policy source is found in the The policy source is found in the
/etc/selinux/refpolicy/src/policy/ directory. /etc/selinux/refpolicy/src/policy/ directory.
Use the example targeted modules configuration.
</p> </p>
<div id="codeblock"> <div id="codeblock">
<pre> <pre>
# <b>cd /etc/selinux/refpolicy/src/policy</b> # <b>cd /etc/selinux/refpolicy/src/policy</b>
# <b>cp policy/modules.conf.targeted_example policy/modules.conf</b>
</pre> </pre>
</div> </div>
<p> <p>
Edit the policy Makefile (/etc/selinux/refpolicy/src/policy/Makefile). Edit the policy Makefile (/etc/selinux/refpolicy/src/policy/Makefile).
Near the top of the file, the policy has a few build options. Near the top of the file, the policy has a few build options.
The TYPE needs to be set to targeted, and the DISTRO option needs to be The TYPE needs to be set to targeted, the DISTRO option needs to be
uncommented and set to redhat. uncommented and set to redhat, and DIRECT_INITRC should be set to y.
</p> </p>
<div id="codeblock"> <div id="codeblock">
<pre> <pre>
@ -54,7 +52,9 @@
#OUTPUT_POLICY = 18 #OUTPUT_POLICY = 18
# Policy Type # Policy Type
# strict, targeted, strict-mls, targeted-mls # strict, targeted,
# strict-mls, targeted-mls,
# strict-mcs, targeted-mcs
TYPE = <font color=red><b>targeted</b></font> TYPE = <font color=red><b>targeted</b></font>
# Policy Name # Policy Name
@ -72,6 +72,13 @@ NAME = refpolicy
# Fedora users should enable redhat. # Fedora users should enable redhat.
<font color=red><b>DISTRO = redhat</b></font> <font color=red><b>DISTRO = redhat</b></font>
# Direct admin init
# Setting this will allow sysadm to directly
# run init scripts, instead of requring run_init.
# This is a build option, as role transitions do
# not work in conditional policy.
DIRECT_INITRC=<font color=red><b>y</b></font>
# Build monolithic policy. Putting n here # Build monolithic policy. Putting n here
# will build a loadable module policy. # will build a loadable module policy.
# Only monolithic policies are currently supported. # Only monolithic policies are currently supported.