SELinux FAQ problem

[Stephen Smalley]

On Tue, 2006-03-28 at 10:05 -0800, Florin Andrei wrote:
> I am following the instructions found here to customize the policy:
> 
> http://fedora.redhat.com/docs/selinux-faq-fc5/#id2784794
> 
> But I get this:
> 
> ######################################################
> # audit2allow -i audit.txt -M local -l
> Generating type enforcment file: local.te
> Compiling policy
> checkmodule -M -m -o local.mod local.te
> /usr/bin/audit2allow: sh: checkmodule: command not found
> ######################################################
> 
> The problem is, I have no idea what is "checkmodule".

yum install checkpolicy

It contains both checkpolicy (compile monolithic policies) and
checkmodule (compile modular policies).

-- 
Stephen Smalley
National Security Agency