Re: Build SELinux policy

[Jeff Becker <jeff.c.becker@xxxxxxxxx>]

I figured out that I was missing a preparation step. Sorry for the noise. Thanks.

-jeff

On Fri, Nov 18, 2016 at 3:08 PM, Jeff Becker <jeff.c.becker@xxxxxxxxx> wrote:

Hi. I have selinux-policy-3.13.1-102.el7_3.4.src.rpm. After installing it, I ran rpmbuild -bt to set up the BUILD directory. In BUILD/serefpolicy-3.13.1/, I edited build.conf to specify UBAC=y and name my policy targeted-ubac. I then ran "make conf;make install-src". I then cd to /etc/selinux/targeted-ubac/src/policy, and ran "make load". I get the following error.

Creating targeted-ubac base module base.conf

cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf

Compiling targeted-ubac base module

/usr/bin/checkmodule -M -U allow base.conf -o tmp/base.mod

/usr/bin/checkmodule:  loading policy configuration from base.conf

policy/modules/kernel/domain.te:285:ERROR 'unknown type tape_device_t used in transition definition' at token ';' on line 26087:

type_transition named_filetrans_domain device_t:chr_file tape_device_t "ht00";

I can see tape_device_t in policy/modules/kernel/storage.te, so I'm not sure what the problem is. Any advice appreciated. Thanks.

-jeff

_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx