Re: using an interface defined in another loaded module

[SZIGETVÁRI János]

Dear Gary,

Thanks a zillion times for your help, the building of the policy works fine
now that I have copied the .if file of the submodule to the directory you
mentioned!
I did not know I was reqired to copy the module's interface file to
SELinux's include dirs to make it available for other modules to use.

BTW, I was building my module from within my "policy builder and installer"
script using the "traditional" way of:
# make -f /usr/share/selinux/devel/Makefile A.pp

Now the build process works, thanks to your suggestion!

Best Regards,
János
--
Janos SZIGETVARI
RHCE, License no. 150-053-692
<https://www.redhat.com/rhtapps/verify/?certId=150-053-692>

LinkedIn: linkedin.com/in/janosszigetvari
E-mail: janos(a)szigetvari.com, jszigetvari(a)gmail.com
Phone: [phone] (Hungary)

__@__˚V˚
Make the switch to open (source) applications, protocols, formats now:
- windows -> Linux, iexplore -> Firefox, msoffice -> LibreOffice
- msn -> jabber protocol (Pidgin, Google Talk)
- mp3 -> ogg, wmv -> ogg, jpg -> png, doc/xls/ppt -> odt/ods/odp


Gary Tierney <gary.tierney(a)gmx.com&gt; ezt írta (időpont: 2019. ápr. 3., Sze,
17:14):

>  On Wed, Apr 03, 2019 at 10:34:08AM +0200, SZIGETVÁRI János wrote:
>  >Could anyone please give me some insight on this?
>  >
>  >Thanks a lot!
>  >
>
>  Hi,
>
>  How are you building and installing your policy modules? The interface
>  definitions (.if files) aren't preserved in the compiled policy package,
>  so are typically kept elsewhere. On Fedora this is under
>  /usr/share/selinux/devel/include and its associated subdirectories
>  (which are recursively walked to find .if files when building policy
>  using the refpolicy framework, i.e., the selinux-policy-devel package).
>
>  So it should be as simple as copying your .if files to:
>  /usr/share/selinux/devel/include (though the "services" subdir is likely
>  more appropriate).
>
>  Thanks,
>  Gary.
>
>  >Best Regards,
>  >János Szigetvári
>  >
>  >SZIGETVÁRI János <jszigetvari(a)gmail.com&gt; ezt írta (időpont: 2019. márc.
>  >31., V, 13:47):
>  >
>  >> ... snip ...
>  >_______________________________________________
>  >selinux mailing list -- selinux(a)lists.fedoraproject.org
>  >To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>  >Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  >List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  >List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]...
>
>