On 11/09/2016 08:54 PM, Jeff Becker wrote: > Hi. I successfully compiled and loaded the following policy file on > RHEL7 with the latest (as of yesterday) SELinux rpms. However, when I > run "seinfo -tfoo_t -x", I don't see ubac_constrained_type listed in the > attributes. How do I enable UBAC? Thanks. Hi Jeff, we don't build Fedora/RHEL distribution policy with UBAC support. You would need to rebuild the policy from srpms to enable it. What is your intention with UBAC? > > -jeff > > -------------------------------------------------------------------------------------------------------------------------------------------------------------- > > policy_module(foo, 1.0.0) > > ######################################## > # > # Declarations > # > userdom_unpriv_user_template(foo) > > ######################################## > # > # foo local policy > # > > domain_use_interactive_fds(foo_t) > > files_read_etc_files(foo_t) > > miscfiles_read_localization(foo_t) > > ubac_constrained(foo_t) > > > > _______________________________________________ > selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx > -- Miroslav Grepl Senior Software Engineer, SELinux Solutions Red Hat, Inc. _______________________________________________ selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
