I figured out that I was missing a preparation step. Sorry for the noise.
Thanks.
-jeff
On Fri, Nov 18, 2016 at 3:08 PM, Jeff Becker <jeff.c.becker(a)gmail.com>
wrote:
Hi. I have selinux-policy-3.13.1-102.el7_3.4.src.rpm. After
installing
it, I ran rpmbuild -bt to set up the BUILD directory. In
BUILD/serefpolicy-3.13.1/, I edited build.conf to specify UBAC=y and name
my policy targeted-ubac. I then ran "make conf;make install-src". I then cd
to /etc/selinux/targeted-ubac/src/policy, and ran "make load". I get the
following error.
Creating targeted-ubac base module base.conf
cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf
tmp/only_te_rules.conf tmp/all_post.conf > base.conf
Compiling targeted-ubac base module
/usr/bin/checkmodule -M -U allow base.conf -o tmp/base.mod
/usr/bin/checkmodule: loading policy configuration from base.conf
policy/modules/kernel/domain.te:285:ERROR 'unknown type tape_device_t
used in transition definition' at token ';' on line 26087:
type_transition named_filetrans_domain device_t:chr_file tape_device_t
"ht00";
I can see tape_device_t in policy/modules/kernel/storage.te, so I'm not
sure what the problem is. Any advice appreciated. Thanks.
-jeff