On Fri, 2006-03-24 at 20:19 -0600, W. Michael Petullo wrote:
I've found some good documentation on building SELinux modules
at
http://sepolicy-server.sourceforge.net/index.php?page=module-overview.
However, this article states, "Note that the syslog.te file must already
be preprocessed by m4 if it contains macros." I can't find any clear
documentation that describes how to perform this step.
How does one process a policy source file using m4 and what package
provides the required macro definitions (i.e.: domain_auto_trans?)
selinux-policy provides /usr/share/selinux/devel
and /usr/share/doc/selinux-policy-x.y.z. There should be a Makefile and
include tree under the devel directory that can be used to easily build
policy modules. There is also a start at a policygentool, but I think
the one that shipped in FC5 wasn't quite working.
--
Stephen Smalley
National Security Agency