more updates for release

This commit is contained in:
Chris PeBenito 2005-08-01 17:55:04 +00:00
parent 60abb5fdab
commit 7c347cddcb
4 changed files with 39 additions and 13 deletions

View File

@ -1,6 +1,8 @@
<h1>Getting Started</h1>
<p>
This guide will walk you through the basics of creating a new reference policy module. This will also serve as an introduction to the basics concepts and philosophy of refpolicy.
To install and use a targeted Reference Policy on a Fedora Core 4 system, see the
<a href="index.php?page=switch">switching guide</a>.
</p>
<h2>Creating A Module</h2>
<p>

View File

@ -3,6 +3,7 @@
<a href="index.php?page=contributing">Contributing</a><br/>
<a href="index.php?page=documentation">Documentation</a><br/>
- <a href="index.php?page=getting-started">Getting Started</a><br/>
- <a href="index.php?page=switch">Switch to Reference Policy</a><br/>
- <a href="api-docs/">Interface Reference</a><br/>
<a href="index.php?page=download">Download</a><br/>
<!--<IMG src="http://sourceforge.net/sflogo.php?group_id=???&amp;type=1" w

View File

@ -1,4 +1,4 @@
<h1>Switching to Reference Policy</h1>
<h1>Switching to Targeted Reference Policy</h1>
<p>
This guide will walk you through switching to the targeted reference
policy on a Fedora system.
@ -11,21 +11,34 @@
from Sourceforge. Download the policy, and unpack it to a temporary
directory. Then use the install-src make target to install the policy
sources.
</p>
<div id="codeblock">
<pre>
# tar -jxvf refpolicy-20050711.tar.bz2 -C /tmp
# tar -jxvf refpolicy-xxxxxxxx.tar.bz2 -C /tmp
# cd /tmp/refpolicy
# make install-src
</pre>
</div>
<h2>
Configure the policy
</h2>
<p>
The policy source is found in the
/etc/selinux/refpolicy/src/policy/ directory.
Use the example targeted modules configuration.
</p>
<div id="codeblock">
<pre>
# cd /etc/selinux/refpolicy/src/policy
# cp policy/modules.conf.targeted_example policy/modules.conf
</pre>
</div>
<p>
Near the top of the policy Makefile, the policy has a few build options.
The TYPE needs to be set to targeted, and the DISTRO option needs to be
uncommented, and set to redhat. The Makefile is found in the
/etc/selinux/refpolicy/src/policy/ directory.
uncommented and set to redhat.
</p>
<div id="codeblock">
<pre>
########################################
#
@ -65,13 +78,19 @@ MONOLITHIC=y
# Uncomment this to disable command echoing
#QUIET:=@
</pre>
</div>
<h2>
Install the binary policy and application configuration files
Install the policy
</h2>
<p>
Next, install the policy, application configuration files, and
file contexts.
</p>
<div id="codeblock">
<pre>
# cd /etc/selinux/refpolicy/src/policy
# make install
</pre>
</div>
<h2>
Change SELinux Configuration
</h2>
@ -79,6 +98,7 @@ MONOLITHIC=y
Modify the /etc/selinux/config file, and set SELINUXTYPE to refpolicy.
It should look similar to this:
</p>
<div id="codeblock">
<pre>
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
@ -91,14 +111,17 @@ SELINUX=enforcing
# strict - Full SELinux protection.
SELINUXTYPE=<font color=red><b>refpolicy</b></font>
</pre>
</div>
<h2>
Relabel
Restart and Relabel
</h2>
<p>
The system needs to be restarted with the new policy, and relabeled
on booting.
</p>
<div id="codeblock">
<pre>
# touch /.autorelabel
# shutdown -r now
</pre>
</div>

View File

@ -3,4 +3,4 @@
# This will 'publish' the reference policy website.
cp ../refpolicy/Changelog html/Changelog.txt
rsync -r . shell.sf.net:/home/groups/s/se/serefpolicy/htdocs
rsync -avr --exclude .svn . shell.sf.net:/home/groups/s/se/serefpolicy/htdocs