On Thu, 2005-06-16 at 15:19 -0400, Security News wrote: > I have just put my custom policy on a text box with the sources > included. I put the sources under /etc/selinux/dan_policy/ > I still have the strict source files in the /etc/selinux directory, > but I have updated /etc/selinux/config to load the "dan_policy" > > Now my problem is that when I update the source files and try to "make > relabel" or "fixfiles" both programs run the file contexts from the > STRICT directory. > > How do I get these programs to run my own file_context files under > /etc/selinux/dan_policy/...? You shouldn't need sources to relabel; relabeling is based on the installed /etc/selinux/$SELINUXTYPE/contexts/files/file_contexts* files. And SELINUXTYPE is read from /etc/selinux/config. I'm a little confused by your description above; /etc/selinux/dan_policy should be a complete policy tree, i.e. /etc/selinux/dan_policy/policy/policy.NN would be the installed binary policy file, /etc/selinux/dan_policy/contexts/files/file_contexts would be the file contexts configuration, and if you happen to install sources (which aren't needed), they would go under /etc/selinux/dan_policy/src/policy. Just like the strict or targeted policies. -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list
