more updates for release
This commit is contained in:
parent
60abb5fdab
commit
7c347cddcb
@ -1,6 +1,8 @@
|
||||
<h1>Getting Started</h1>
|
||||
<p>
|
||||
This guide will walk you through the basics of creating a new reference policy module. This will also serve as an introduction to the basics concepts and philosophy of refpolicy.
|
||||
To install and use a targeted Reference Policy on a Fedora Core 4 system, see the
|
||||
<a href="index.php?page=switch">switching guide</a>.
|
||||
</p>
|
||||
<h2>Creating A Module</h2>
|
||||
<p>
|
||||
|
@ -3,6 +3,7 @@
|
||||
<a href="index.php?page=contributing">Contributing</a><br/>
|
||||
<a href="index.php?page=documentation">Documentation</a><br/>
|
||||
- <a href="index.php?page=getting-started">Getting Started</a><br/>
|
||||
- <a href="index.php?page=switch">Switch to Reference Policy</a><br/>
|
||||
- <a href="api-docs/">Interface Reference</a><br/>
|
||||
<a href="index.php?page=download">Download</a><br/>
|
||||
<!--<IMG src="http://sourceforge.net/sflogo.php?group_id=???&type=1" w
|
||||
|
@ -1,4 +1,4 @@
|
||||
<h1>Switching to Reference Policy</h1>
|
||||
<h1>Switching to Targeted Reference Policy</h1>
|
||||
<p>
|
||||
This guide will walk you through switching to the targeted reference
|
||||
policy on a Fedora system.
|
||||
@ -11,21 +11,34 @@
|
||||
from Sourceforge. Download the policy, and unpack it to a temporary
|
||||
directory. Then use the install-src make target to install the policy
|
||||
sources.
|
||||
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# tar -jxvf refpolicy-20050711.tar.bz2 -C /tmp
|
||||
# tar -jxvf refpolicy-xxxxxxxx.tar.bz2 -C /tmp
|
||||
# cd /tmp/refpolicy
|
||||
# make install-src
|
||||
</pre>
|
||||
</div>
|
||||
<h2>
|
||||
Configure the policy
|
||||
</h2>
|
||||
<p>
|
||||
The policy source is found in the
|
||||
/etc/selinux/refpolicy/src/policy/ directory.
|
||||
Use the example targeted modules configuration.
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# cd /etc/selinux/refpolicy/src/policy
|
||||
# cp policy/modules.conf.targeted_example policy/modules.conf
|
||||
</pre>
|
||||
</div>
|
||||
<p>
|
||||
Near the top of the policy Makefile, the policy has a few build options.
|
||||
The TYPE needs to be set to targeted, and the DISTRO option needs to be
|
||||
uncommented, and set to redhat. The Makefile is found in the
|
||||
/etc/selinux/refpolicy/src/policy/ directory.
|
||||
uncommented and set to redhat.
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
########################################
|
||||
#
|
||||
@ -65,13 +78,19 @@ MONOLITHIC=y
|
||||
# Uncomment this to disable command echoing
|
||||
#QUIET:=@
|
||||
</pre>
|
||||
</div>
|
||||
<h2>
|
||||
Install the binary policy and application configuration files
|
||||
Install the policy
|
||||
</h2>
|
||||
<p>
|
||||
Next, install the policy, application configuration files, and
|
||||
file contexts.
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# cd /etc/selinux/refpolicy/src/policy
|
||||
# make install
|
||||
</pre>
|
||||
</div>
|
||||
<h2>
|
||||
Change SELinux Configuration
|
||||
</h2>
|
||||
@ -79,6 +98,7 @@ MONOLITHIC=y
|
||||
Modify the /etc/selinux/config file, and set SELINUXTYPE to refpolicy.
|
||||
It should look similar to this:
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# This file controls the state of SELinux on the system.
|
||||
# SELINUX= can take one of these three values:
|
||||
@ -91,14 +111,17 @@ SELINUX=enforcing
|
||||
# strict - Full SELinux protection.
|
||||
SELINUXTYPE=<font color=red><b>refpolicy</b></font>
|
||||
</pre>
|
||||
</div>
|
||||
<h2>
|
||||
Relabel
|
||||
Restart and Relabel
|
||||
</h2>
|
||||
<p>
|
||||
The system needs to be restarted with the new policy, and relabeled
|
||||
on booting.
|
||||
</p>
|
||||
<div id="codeblock">
|
||||
<pre>
|
||||
# touch /.autorelabel
|
||||
# shutdown -r now
|
||||
</pre>
|
||||
</div>
|
||||
|
@ -3,4 +3,4 @@
|
||||
# This will 'publish' the reference policy website.
|
||||
|
||||
cp ../refpolicy/Changelog html/Changelog.txt
|
||||
rsync -r . shell.sf.net:/home/groups/s/se/serefpolicy/htdocs
|
||||
rsync -avr --exclude .svn . shell.sf.net:/home/groups/s/se/serefpolicy/htdocs
|
||||
|
Loading…
Reference in New Issue
Block a user