Hi. I have selinux-policy-3.13.1-102.el7_3.4.src.rpm. After installing it, I ran rpmbuild -bt to set up the BUILD directory. In BUILD/serefpolicy-3.13.1/, I edited build.conf to specify UBAC=y and name my policy targeted-ubac. I then ran "make conf;make install-src". I then cd to /etc/selinux/targeted-ubac/src/policy, and ran "make load". I get the following error.
Creating targeted-ubac base module base.conf
cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf
Compiling targeted-ubac base module
/usr/bin/checkmodule -M -U allow base.conf -o tmp/base.mod
/usr/bin/checkmodule: loading policy configuration from base.conf
policy/modules/kernel/domain.te:285:ERROR 'unknown type tape_device_t used in transition definition' at token ';' on line 26087:
type_transition named_filetrans_domain device_t:chr_file tape_device_t "ht00";
I can see tape_device_t in policy/modules/kernel/storage.te, so I'm not sure what the problem is. Any advice appreciated. Thanks.
-jeff
_______________________________________________ selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
