[selinux] SElinux newbie question

[David Li]

Robin,
yep, that worked!
My policy is actually built into the targeted RPM. So I don't need to
do semodule again.
Thanks!



On Wed, Oct 14, 2015 at 3:55 PM, Robin Lee Powell
<rlpowell at digitalkingdom.org> wrote:
> Assuming CentOS is the same as Fedora in this regard, you'll want
> selinux-policy-targeted (which is the normal SELinux user policy)
> and whatever package includes /usr/share/selinux/devel/Makefile
> (which is how you make modules; make a directory with only your .te
> and maybe .fc file, and run: /usr/bin/make -f
> /usr/share/selinux/devel/Makefile , and then semodule -i modname.pp )
>
> On Wed, Oct 14, 2015 at 03:41:18PM -0700, David Li wrote:
>> Hi,
>>
>> I am using CentOS 7.1 and just built the following new Selinux policy
>> RPMs. I wonder which one I should use in install.  Or do I need to
>> install all of them?
>>
>> My purpose is to test a simple policy that I wrote.
>>
>>
>> [admin at localhost noarch]$ ll
>> total 8996
>> -rw-rw-r--. 1 admin admin  361920 Oct 14 11:47
>> selinux-policy-3.13.1-23.el7.centos.noarch.rpm
>> -rw-rw-r--. 1 admin admin 3467872 Oct 14 11:47
>> selinux-policy-devel-3.13.1-23.el7.centos.noarch.rpm
>> -rw-rw-r--. 1 admin admin  917644 Oct 14 11:47
>> selinux-policy-doc-3.13.1-23.el7.centos.noarch.rpm
>> -rw-rw-r--. 1 admin admin  365812 Oct 14 11:47
>> selinux-policy-sandbox-3.13.1-23.el7.centos.noarch.rpm
>> -rw-rw-r--. 1 admin admin 4084412 Oct 14 11:47
>> selinux-policy-targeted-3.13.1-23.el7.centos.noarch.rpm
>>
>> Thanks.
>> --
>> selinux mailing list
>> selinux at lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/selinux