All of lore.kernel.org
 help / color / mirror / Atom feed
From: rfkrocktk@gmail.com (Naftuli Kay)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] Install Directory for Reference Policy?
Date: Tue, 17 Jan 2017 10:09:20 -0800	[thread overview]
Message-ID: <CAPTk+sYSDOG=57k+iEjJ8N-TGT+3YZ0+CyOFwD0igO=FBJghLw@mail.gmail.com> (raw)
In-Reply-To: <8978CC35-BED8-451C-BB84-F2335A256ADE@chaschperli.ch>

I have not, I was unfortunately not aware of it. Following instructions now.
Thanks,
 - Naftuli Kay


On Mon, Jan 16, 2017 at 9:05 PM, Thomas <thomas@chaschperli.ch> wrote:
> Did you follow the guide?
> https://github.com/TresysTechnology/refpolicy/wiki/UseRefpolicy
>
> And i think semanage requires the -S switch to operate on a non loaded
> policy store:
>
> -S, --store
> Select and alternate SELinux store to manage
>
> -thomas
>
> Am 17. Januar 2017 05:24:40 MEZ schrieb Naftuli Kay via refpolicy
> <refpolicy@oss.tresys.com>:
>>
>> I'm on Ubuntu 16.04 and I've just compiled the reference policy via:
>>
>> git clone https://github.com/TresysTechnology/refpolicy.git
>> cd refpolicy
>> git submodule init
>> git submodule update
>> git checkout RELEASE_2_20161023
>> ( cd policy/modules/contrib && git checkout RELEASE_2_20161023 )
>> make conf
>> make install
>>
>> My build.conf looks like this:
>>
>> TYPE = standard
>> NAME = refpolicy
>> DISTRO = debian
>> UNK_PERMS = deny
>> DIRECT_INITRC = n
>> SYSTEMD = y
>> MONOLITHIC = n
>> UBAC = y
>> CUSTOM_BUILDOPT =
>> MLS_SENS = 16
>> MLS_CATS = 1024
>> MCS_CATS = 1024
>> QUIET = n
>>
>> Pretty normal stuff.
>>
>> Unfortunately, though it properly loads at the time of "make install,"
>> it isn't installed into the expected directory by my distro.
>> Apparently, Ubuntu wants the binary files to be located at
>> /etc/selinux/$NAME. The upstream "selinux-policy-default" package
>> installs its dependencies to /etc/selinux/default and its contents can
>> be viewed here: http://pastebin.com/8fXvdFUA
>>
>> Is there a variable I need to set to have the reference policy install
>> itself/copy its files following this pattern to
>> /etc/selinux/refpolicy?
>> ________________________________
>>
>> refpolicy mailing list
>> refpolicy at oss.tresys.com
>> http://oss.tresys.com/mailman/listinfo/refpolicy

  reply	other threads:[~2017-01-17 18:09 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2017-01-17  4:24 [refpolicy] Install Directory for Reference Policy? Naftuli Kay
2017-01-17  5:05 ` Thomas
2017-01-17 18:09   ` Naftuli Kay [this message]
2017-01-17 18:21     ` Naftuli Kay
2017-01-17 23:11       ` Guido Trentalancia
2017-01-29 19:14         ` Naftuli Kay
2017-01-29 20:29           ` Guido Trentalancia
2017-01-29 20:59             ` Guido Trentalancia
2017-01-29 22:43           ` Guido Trentalancia
2017-01-30 18:45             ` Naftuli Kay
2017-01-30 20:55 ` Guido Trentalancia
2017-01-31 14:19   ` Guido Trentalancia
2017-02-06  3:53     ` Naftuli Kay
2017-02-07 22:52       ` Guido Trentalancia
2017-02-22  5:35         ` Naftuli Kay

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='CAPTk+sYSDOG=57k+iEjJ8N-TGT+3YZ0+CyOFwD0igO=FBJghLw@mail.gmail.com' \
    --to=rfkrocktk@gmail.com \
    --cc=refpolicy@oss.tresys.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.