update on targeted config
This commit is contained in:
parent
48558667c0
commit
5561135dd2
@ -15,7 +15,7 @@
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# <b>tar -jxvf refpolicy-20050802.tar.bz2 -C /tmp</b>
|
||||
# <b>tar -jxvf refpolicy-20050922.tar.bz2 -C /tmp</b>
|
||||
# <b>cd /tmp/refpolicy</b>
|
||||
# <b>make install-src</b>
|
||||
</pre>
|
||||
@ -26,19 +26,17 @@
|
||||
<p>
|
||||
The policy source is found in the
|
||||
/etc/selinux/refpolicy/src/policy/ directory.
|
||||
Use the example targeted modules configuration.
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# <b>cd /etc/selinux/refpolicy/src/policy</b>
|
||||
# <b>cp policy/modules.conf.targeted_example policy/modules.conf</b>
|
||||
</pre>
|
||||
</div>
|
||||
<p>
|
||||
Edit the policy Makefile (/etc/selinux/refpolicy/src/policy/Makefile).
|
||||
Near the top of the file, the policy has a few build options.
|
||||
The TYPE needs to be set to targeted, and the DISTRO option needs to be
|
||||
uncommented and set to redhat.
|
||||
The TYPE needs to be set to targeted, the DISTRO option needs to be
|
||||
uncommented and set to redhat, and DIRECT_INITRC should be set to y.
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
@ -54,7 +52,9 @@
|
||||
#OUTPUT_POLICY = 18
|
||||
|
||||
# Policy Type
|
||||
# strict, targeted, strict-mls, targeted-mls
|
||||
# strict, targeted,
|
||||
# strict-mls, targeted-mls,
|
||||
# strict-mcs, targeted-mcs
|
||||
TYPE = <font color=red><b>targeted</b></font>
|
||||
|
||||
# Policy Name
|
||||
@ -72,6 +72,13 @@ NAME = refpolicy
|
||||
# Fedora users should enable redhat.
|
||||
<font color=red><b>DISTRO = redhat</b></font>
|
||||
|
||||
# Direct admin init
|
||||
# Setting this will allow sysadm to directly
|
||||
# run init scripts, instead of requring run_init.
|
||||
# This is a build option, as role transitions do
|
||||
# not work in conditional policy.
|
||||
DIRECT_INITRC=<font color=red><b>y</b></font>
|
||||
|
||||
# Build monolithic policy. Putting n here
|
||||
# will build a loadable module policy.
|
||||
# Only monolithic policies are currently supported.
|
||||
|
Loading…
Reference in New Issue
Block a user