RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2025-03-02 16:30:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,477 Commits 4 Branches 751 Tags 23 MiB
C 74.6%
Python 16.2%
Roff 5.2%
SWIG 1.2%
Makefile 1.1%
Other 1.7%
c78f9c355f
Go to file
Stephen Smalley c78f9c355f setsebool: support use of -P on SELinux-disabled hosts 
As reported in #123, setsebool immediately exits with an error if
SELinux is disabled, preventing its use for setting boolean persistent
values.  In contrast, semanage boolean -m works on SELinux-disabled
hosts.  Change setsebool so that it can be used with the -P option
(persistent changes) even if SELinux is disabled.  In the SELinux-disabled
case, skip setting of active boolean values, but set the persistent value
in the policy store.  Policy reload is automatically disabled by libsemanage
when SELinux is disabled, so we only need to call semanage_set_reload()
if -N was used.

Fixes: https://github.com/SELinuxProject/selinux/issues/123
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
2019-01-17 13:56:05 -05:00
checkpolicy checkpolicy: Add option to sort ocontexts when creating a binary policy 2018-10-12 13:38:00 -04:00
dbus dbus: remove deprecated at_console statement 2018-11-22 10:03:30 +01:00
gui gui: remove html_util.py 2018-11-22 10:03:49 +01:00
libselinux Makefile: add -Wstrict-overflow=5 to CFLAGS 2018-12-31 08:06:29 -08:00
libsemanage libsemanage: set selinux policy root around calls to selinux_boolean_sub 2019-01-12 19:01:24 +01:00
libsepol libsepol: ibpkeys.c: fix printf format string specifiers for subnet_prefix 2018-11-23 21:38:44 +01:00
mcstrans mcstrans: Fix check in raw_color() 2018-12-20 15:13:12 +01:00
policycoreutils setsebool: support use of -P on SELinux-disabled hosts 2019-01-17 13:56:05 -05:00
python python/sepolicy: initialize mislabeled_files in __init__() 2019-01-16 21:29:17 +01:00
restorecond restorecond: Do not ignore the -f option 2018-10-11 10:53:08 -04:00
sandbox Fix minor typos 2018-06-30 20:28:25 +02:00
scripts scripts/run-flake8: run on Python scripts not ending with .py 2019-01-08 13:21:09 +01:00
secilc secilc: better error handling 2018-09-25 08:05:41 -07:00
semodule-utils Update VERSIONs to 2.8 for release. 2018-05-24 14:21:09 -04:00
.gitignore restorecond: Add gitignore 2016-11-16 11:20:05 -05:00
.travis.yml Travis-CI: download refpolicy and install headers 2019-01-08 10:15:46 +01:00
CleanSpec.mk
Makefile build: setup buildpaths if DESTDIR is specified 2018-02-14 20:02:03 +01:00
README README: Update the SELinux mailing list location 2018-10-16 11:08:39 -04:00

README 

Please submit all bug reports and patches to selinux@vger.kernel.org.
Subscribe by sending "subscribe selinux" in the body of an email
to majordomo@vger.kernel.org.

Build dependencies on Fedora:
yum install audit-libs-devel bison bzip2-devel dbus-devel dbus-glib-devel flex flex-devel flex-static glib2-devel libcap-devel libcap-ng-devel pam-devel pcre-devel python-devel setools-devel swig xmlto redhat-rpm-config

To build and install everything under a private directory, run:
make DESTDIR=~/obj install install-pywrap

To install as the default system libraries and binaries
(overwriting any previously installed ones - dangerous!),
on x86_64, run:
make LIBDIR=/usr/lib64 SHLIBDIR=/lib64 install install-pywrap relabel
or on x86 (32-bit), run:
make install install-pywrap relabel

This may render your system unusable if the upstream SELinux userspace
lacks library functions or other dependencies relied upon by your
distribution.  If it breaks, you get to keep both pieces.

To install libsepol on macOS (mainly for policy analysis):
cd libsepol; make PREFIX=/usr/local install

This requires GNU coreutils (brew install coreutils).