Where is policy source?

Stephen Smalley sds at tycho.nsa.gov
Mon Dec 12 15:31:28 UTC 2005


On Mon, 2005-12-12 at 10:00 -0500, Yuichi Nakamura wrote:
> Hi.
> 
> I've begun to try Rawhide.
> I installed FC5-test1 and did yum update. 
> Policy is now reference policy(selinux-policy-targeted-2.1.2-2).
> However, I can not find selinux-policy-targeted-source package for refpolicy.
> Where is policy source? 
> How do I edit policy?

Policy sources are now only available via the .src.rpm file; it is no
longer necessary or desirable to have a separate
selinux-policy-targeted-sources package.

If you just want to add policy, you can generate local policy
separately, build it as a module, and install the module without needing
the base policy sources.  See the EXAMPLE section of the updated
audit2allow man page, along with the man pages for checkmodule,
semodule_package, and semodule.

We still need to have the reference policy install its interfaces files
somewhere standard ala /usr/include so that we can write policy modules
that use those interfaces without needing the .src.rpm for the base
policy.

-- 
Stephen Smalley
National Security Agency




More information about the selinux mailing list