Re: Build SELinux policy

[Jeff Becker]

I figured out that I was missing a preparation step. Sorry for the noise.
Thanks.

-jeff

On Fri, Nov 18, 2016 at 3:08 PM, Jeff Becker <jeff.c.becker(a)gmail.com&gt;
wrote:

>  Hi. I have selinux-policy-3.13.1-102.el7_3.4.src.rpm. After
> installing
>  it, I ran rpmbuild -bt to set up the BUILD directory. In
>  BUILD/serefpolicy-3.13.1/, I edited build.conf to specify UBAC=y and name
>  my policy targeted-ubac. I then ran "make conf;make install-src". I then cd
>  to /etc/selinux/targeted-ubac/src/policy, and ran "make load". I get the
>  following error.
>
>  Creating targeted-ubac base module base.conf
>  cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf
>  tmp/only_te_rules.conf tmp/all_post.conf > base.conf
>  Compiling targeted-ubac base module
>  /usr/bin/checkmodule -M -U allow base.conf -o tmp/base.mod
>  /usr/bin/checkmodule:  loading policy configuration from base.conf
>  policy/modules/kernel/domain.te:285:ERROR 'unknown type tape_device_t
>  used in transition definition' at token ';' on line 26087:
>  type_transition named_filetrans_domain device_t:chr_file tape_device_t
>  "ht00";
>
>  I can see tape_device_t in policy/modules/kernel/storage.te, so I'm not
>  sure what the problem is. Any advice appreciated. Thanks.
>
>  -jeff
>