f9deb94ba4
Writing .fc files without any mistake is quite hard. Sometimes a regular
expression pattern compiles fine but it does not match what is intended.
Add a script that detects some issues in .fc files. When this script is
used directly ("./testing/check_fc_files.py"), it checks the content of
policy/. The path to policy/ can also be provided by option -p.
Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>
46 lines
1015 B
Plaintext
46 lines
1015 B
Plaintext
Reference Policy has the following build requirements:
|
|
* libsepol 2.7
|
|
* libsemanage 2.6
|
|
* checkpolicy 2.6
|
|
* policycoreutils 2.6
|
|
* Python >= 3.4
|
|
* GCC
|
|
|
|
When developing a policy, running scripts from directory testing/ requires:
|
|
* Python >= 3.6
|
|
|
|
To install Reference Policy sources into /etc/selinux/refpolicy/src/policy:
|
|
|
|
make install-src
|
|
|
|
This will back up a pre-existing source policy to the
|
|
/etc/selinux/refpolicy/src/policy.bak directory.
|
|
|
|
If you do not have a modules.conf, one can be generated:
|
|
|
|
make conf
|
|
|
|
This will create a default modules.conf. Options for the policy
|
|
build process can be found in build.conf. After installing the policy sources,
|
|
the old Make targets have been maintained for the monolithic policy:
|
|
|
|
Local policy development:
|
|
|
|
make policy
|
|
|
|
Compile and install the policy:
|
|
|
|
make install
|
|
|
|
Compile, install, and load the policy:
|
|
|
|
make load
|
|
|
|
Filesystem labeling:
|
|
|
|
make relabel
|
|
make checklabels
|
|
make restorelabels
|
|
|
|
See the README for more information on available make targets.
|