update on targeted config

This commit is contained in:
Chris PeBenito 2005-09-22 19:11:59 +00:00
parent 48558667c0
commit 5561135dd2

View File

@ -15,7 +15,7 @@
</p>
<div id="codeblock">
<pre>
# <b>tar -jxvf refpolicy-20050802.tar.bz2 -C /tmp</b>
# <b>tar -jxvf refpolicy-20050922.tar.bz2 -C /tmp</b>
# <b>cd /tmp/refpolicy</b>
# <b>make install-src</b>
</pre>
@ -26,19 +26,17 @@
<p>
The policy source is found in the
/etc/selinux/refpolicy/src/policy/ directory.
Use the example targeted modules configuration.
</p>
<div id="codeblock">
<pre>
# <b>cd /etc/selinux/refpolicy/src/policy</b>
# <b>cp policy/modules.conf.targeted_example policy/modules.conf</b>
</pre>
</div>
<p>
Edit the policy Makefile (/etc/selinux/refpolicy/src/policy/Makefile).
Near the top of the file, the policy has a few build options.
The TYPE needs to be set to targeted, and the DISTRO option needs to be
uncommented and set to redhat.
The TYPE needs to be set to targeted, the DISTRO option needs to be
uncommented and set to redhat, and DIRECT_INITRC should be set to y.
</p>
<div id="codeblock">
<pre>
@ -54,7 +52,9 @@
#OUTPUT_POLICY = 18
# Policy Type
# strict, targeted, strict-mls, targeted-mls
# strict, targeted,
# strict-mls, targeted-mls,
# strict-mcs, targeted-mcs
TYPE = <font color=red><b>targeted</b></font>
# Policy Name
@ -72,6 +72,13 @@ NAME = refpolicy
# Fedora users should enable redhat.
<font color=red><b>DISTRO = redhat</b></font>
# Direct admin init
# Setting this will allow sysadm to directly
# run init scripts, instead of requring run_init.
# This is a build option, as role transitions do
# not work in conditional policy.
DIRECT_INITRC=<font color=red><b>y</b></font>
# Build monolithic policy. Putting n here
# will build a loadable module policy.
# Only monolithic policies are currently supported.