M4 processing for SELinux module

[Stephen Smalley]

On Fri, 2006-03-24 at 20:19 -0600, W. Michael Petullo wrote:
> I've found some good documentation on building SELinux modules at
> http://sepolicy-server.sourceforge.net/index.php?page=module-overview.
> However, this article states, "Note that the syslog.te file must already
> be preprocessed by m4 if it contains macros."  I can't find any clear
> documentation that describes how to perform this step.
> 
> How does one process a policy source file using m4 and what package
> provides the required macro definitions (i.e.: domain_auto_trans?)

selinux-policy provides /usr/share/selinux/devel
and /usr/share/doc/selinux-policy-x.y.z.  There should be a Makefile and
include tree under the devel directory that can be used to easily build
policy modules.  There is also a start at a policygentool, but I think
the one that shipped in FC5 wasn't quite working.

-- 
Stephen Smalley
National Security Agency