How to install SELinux original policy as original RPM

[Shintaro Fujiwara]

Hello, I don't know how to install SELinux original policy as original RPM.
I edited my spec file but semodule didn't work in BUILDROOT.
Thanks in advance.

[Daniel J Walsh]

On 05/05/2009 12:56 AM, Shintaro Fujiwara wrote:
> Hello, I don't know how to install SELinux original policy as original RPM.
> I edited my spec file but semodule didn't work in BUILDROOT.
> Thanks in advance.

semodule should be run in the post install not during the build section. 
  You are adding you policy to the installed policy on the destination 
machine.

[Shintaro Fujiwara]

Thanks, and I will test on my spec file.

2009/5/5 Daniel J Walsh :
> On 05/05/2009 12:56 AM, Shintaro Fujiwara wrote:
> > Hello, I don't know how to install SELinux original policy as original
> > RPM.
> > I edited my spec file but semodule didn't work in BUILDROOT.
> > Thanks in advance.
>
> semodule should be run in the post install not during the build section.
>  You are adding you policy to the installed policy on the destination
> machine.

[Shintaro Fujiwara]

Yeah, I wrote,

%post
/usr/sbin/semodule -u /usr/share/segatex/segatex.pp

but, I got

Requires(post): /bin/sh
Requires: /bin/sh libQt3Support.so.4 libQtCore.so.4 libQtGui.so.4
libQtNetwork.so.4 libQtSql.so.4 libc.so.6 libc.so.6(GLIBC_2.0)
libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.4)
libgcc_s.so.1 libgcc_s.so.1(GCC_3.0) libm.so.6 libpthread.so.0
libselinux.so.1 libstdc++.so.6 libstdc++.so.6(CXXABI_1.3)
libstdc++.so.6(GLIBCXX_3.4) libstdc++.so.6(GLIBCXX_3.4.9)
rtld(GNU_HASH)

what's this, I guess something's lacking in above statement ?

2009/5/5 Daniel J Walsh :
> On 05/05/2009 12:56 AM, Shintaro Fujiwara wrote:
> > Hello, I don't know how to install SELinux original policy as original
> > RPM.
> > I edited my spec file but semodule didn't work in BUILDROOT.
> > Thanks in advance.
>
> semodule should be run in the post install not during the build section.
>  You are adding you policy to the installed policy on the destination
> machine.

[KaiGai Kohei]

Shintaro Fujiwara wrote:
> Yeah, I wrote,
>
> %post
> /usr/sbin/semodule -u /usr/share/segatex/segatex.pp
>
> but, I got
>
> Requires(post): /bin/sh
> Requires: /bin/sh libQt3Support.so.4 libQtCore.so.4 libQtGui.so.4
> libQtNetwork.so.4 libQtSql.so.4 libc.so.6 libc.so.6(GLIBC_2.0)
> libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.1.3) libc.so.6(GLIBC_2.4)
> libgcc_s.so.1 libgcc_s.so.1(GCC_3.0) libm.so.6 libpthread.so.0
> libselinux.so.1 libstdc++.so.6 libstdc++.so.6(CXXABI_1.3)
> libstdc++.so.6(GLIBCXX_3.4) libstdc++.so.6(GLIBCXX_3.4.9)
> rtld(GNU_HASH)
>
> what's this, I guess something's lacking in above statement ?

Do you have the following Reuires: definition in the specfile?

Requires: libselinux policycoreutils selinux-policy

BTW, /usr/share/selinux/<POLICY TYPE>/segatex.pp is more preferable
location to store policy package.

Thanks,
> 2009/5/5 Daniel J Walsh :
> > On 05/05/2009 12:56 AM, Shintaro Fujiwara wrote:
> > > Hello, I don't know how to install SELinux original policy as original
> > > RPM.
> > > I edited my spec file but semodule didn't work in BUILDROOT.
> > > Thanks in advance.
> >
> > semodule should be run in the post install not during the build section.
> >  You are adding you policy to the installed policy on the destination
> > machine.