Trying to get user modification tools and policy source

[Nick]

Conditions:
	Install from DVD
	Download of Tresys tools
	Installation of several RPMs that were needed to compile these tools
	yum update of system.


Problem: I can't build the Tresys tools for user account modification.
I had been doing this in the past:

>  #1.  useradd -m developer 
>  #2.  passwd developer
>  #3. sed -i -e /user\ root/a\ user\ developer\ roles\ \{\ staff_r\ \
>  sysadm_r\ \}\; /etc/security/selinux/src/policy/users 
>  
>  #4. cd /etc/security/selinux/src/policy
>  #5. make policy
>  #6. make load 
I asked the SEL list about this and it was recommeded that I try Tresys
setools?  seuser, seuseradd?.

Problem is, I can't build them I keep getting a message about TCL being
in the wrong place? 

Anyone seen this? This is a new install, without deviations from what
needs to be done initially. I would think this would be a pretty common
problem

I obviously can't do my old procedure since the policy source wasn't
installed.

Thanks

Nix
-- 
Nick Gray
Senior Systems Engineer
Bruzenak Inc.
nagray(a)austin.rr.com
[phone]

[Andrew Farris]

On Wed, 2004-04-28 at 21:27 -0500, Nick wrote:

>  I asked the SEL list about this and it was recommeded that I try
> Tresys
>  setools?  seuser, seuseradd?.
>  
>  Problem is, I can't build them I keep getting a message about TCL being
>  in the wrong place?  
The setools and setools-gui packages are both available in Rawhide at
the moment.

Here are the latest packages from the www.kernel.org mirror.

http://mirrors.kernel.org/fedora/core/development/i386/Fedora/RPMS/setool...
http://mirrors.kernel.org/fedora/core/development/i386/Fedora/RPMS/setool...

-- 
Andrew Farris, CPE senior (California Polytechnic State University, SLO)
fedora(a)andrewfarris.com :: lmorgul on irc.freenode.net
"The only thing necessary for the triumph of evil is for good men
to do nothing." (Edmond Burke)

[Stephen Smalley]

On Wed, 2004-04-28 at 22:27, Nick wrote:
>  I obviously can't do my old procedure since the policy source
> wasn't
>  installed. 
The Tresys setools depend on policy-sources, so you'll still need them
anyway.  yum install checkpolicy policy-sources.  IMHO, they should be
installed by default unless someone explicitly chooses minimal install.

-- 
Stephen Smalley <sds(a)epoch.ncsc.mil&gt;
National Security Agency

[Frank Mayer]

>  
>  The Tresys setools depend on policy-sources, so you'll still need them
>  anyway.  yum install checkpolicy policy-sources.  IMHO, they should be
>  installed by default unless someone explicitly chooses minimal
>  install.  
As I just noted on another thread, in the next couple of weeks we will release
v1.4 of setools that will enable our core library to work directly off the
policy binary.  For the tools that just look at the policy (seinfo, apol,
sesearch,...), the dependency on policy sources will no longer be required.

Of course to change the policy (e.g., seuseradd) policy sources will still be
required but we're hoping that dependency will be eliminated (or mitigated)
following release of the policy binary module infrastructure due out later this
summer.

Frank