<br><br><div><span class="gmail_quote">On 3/8/06, <b class="gmail_sendername">Stephen Smalley</b> <<a href="mailto:sds@tycho.nsa.gov">sds@tycho.nsa.gov</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Wed, 2006-03-08 at 12:44 -0500, Florian Lengyel wrote:<br>> Is this the appropriate list to ask about modifying local Selinux<br>> policies on Red Hat Enterprise Linux 4? If it is, can someone inform<br>> me what i need to download in order to modify the local Selinux
<br>> policy? The source and tools to do this don't seem to be included in<br>> my installation (following the online Red Hat documentation); perhaps<br>> there are appropriate rpms to download in up2date--I don't know what
<br>> they are, and they do not seem to be mentioned in the online<br>> documentation.<br>><br>> If this is not the appropriate list, please let me know.</blockquote><div><br>Thank you for this; you have jogged my memory that I am missing
<br>precisely those sources In the /etc/selinux/targeted/policy subdirectory<br>[root@cml policy]# pwd<br>/etc/selinux/targeted/policy<br><br>There is a file called policy.18<br><br>[root@cml policy]# ls -latrs<br>total 348
<br>332 -rw-r--r-- 1 root root 331417 Mar 8 2005 policy.18<br> 8 drwxr-xr-x 4 root root 4096 Aug 25 2005 ..<br> 8 drwxr-xr-x 2 root root 4096 Aug 25 2005 .<br>[root@cml policy]# <br> <br>but there is no /etc/selinux/policy/sources subdirectory
<br></div><br>The checkpolicy command is present:<br><br>[root@cml policy]# pwd<br>/etc/selinux/targeted/policy<br>[root@cml policy]# ls -latrs<br>total 348<br>332 -rw-r--r-- 1 root root 331417 Mar 8 2005 policy.18<br>
8 drwxr-xr-x 4 root root 4096 Aug 25 2005 ..<br> 8 drwxr-xr-x 2 root root 4096 Aug 25 2005 .<br>[root@cml policy]# <br><br>So I am missing the source directory. I wonder if the missing components are downloadable in rpm form...
<br><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Look for selinux-policy-targeted-sources.<br>That contains the policy sources.<br>Also look for checkpolicy. That is the policy "compiler".
<br><br>--<br>Stephen Smalley<br>National Security Agency<br><br></blockquote></div><br>