Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools

Trace:
generate_selinux_policy

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
Next revisionBoth sides next revision
generate_selinux_policy [2014/06/16 13:46] – [Editing .te policy file] admingenerate_selinux_policy [2016/06/21 13:45] – admin
Line 2: Line 2:
  
 =====Generate SELinux policy===== =====Generate SELinux policy=====
-//Tested on CentOS 6.5//+//Tested on CentOS 7, Fedora 24//
  
   * Install policycoreutils-python <code>yum install policycoreutils-python</code>   * Install policycoreutils-python <code>yum install policycoreutils-python</code>
Line 13: Line 13:
 ====If you need to edit the policy file==== ====If you need to edit the policy file====
   * Edit the .te file.   * Edit the .te file.
-  * Recompile the policy. <code>make -f /usr/share/selinux/devel/Makefile</code> +  * Recompile and load the module. For example: <code> 
-  * Reload the module. <code>semodule -i rsync.pp</code>+checkmodule -M -m -o wfica.mod wfica.te 
 +semodule_package -o wfica.pp -m wfica.mod 
 +semodule -i wfica.pp</code>
generate_selinux_policy.txt · Last modified: 2021/10/09 15:14 by 127.0.0.1