On 4/26/19 6:01 PM, Jag Raman wrote: > > > On 4/24/2019 10:24 AM, Jag Raman wrote: >> >> >>> On Apr 24, 2019, at 7:11 AM, Lukas Vrabec <lvrabec@xxxxxxxxxx> wrote: >>> >>> >>> Agree with Jason, >>> >>> Feel free to contribute, we'll be more than glad ;) >>> >>> Thanks, >>> Lukas. >>> >>> On 4/23/19 11:35 PM, Jason L Tibbitts III wrote: >>>> The selinux-policy RPM references the repository: >>>> >>>> URL : https://github.com/fedora-selinux/selinux-policy >>>> >>>> There are several projects under https://github.com/fedora-selinux >>>> which >>>> might interest you. I see that pull requests are being merged so that >>>> seems a reasonable way to contribute. >>>> >>>> - J< >> >> Thank you very much Jason & Lukas. >> >> I’m trying to build the policy. After cloning the “selinux-policy" repo., >> we need to execute “.travis.yml” to setup the “contrib” folder. Is >> that correct? > There is no need to execute travis.yml, this file is for CI. It's enough to clone contrib repo to selinux base repo. > I'm facing some build issues, and would like to confirm that the > following steps I'm following to build the policy are correct. > > # git clone https://github.com/containers/container-selinux.git > # rm -rf selinux-policy/policy/modules/contrib > # git clone https://github.com/fedora-selinux/selinux-policy-contrib.git > selinux-policy/policy/modules/contrib; > # git clone https://github.com/containers/container-selinux.git > # cp container-selinux/container.* selinux-policy/policy/modules/contrib; > # cd selinux-policy > # make conf > # make policy > Are you following this process? https://github.com/fedora-selinux/selinux-policy/wiki/Compiling > > One of the issues I'm facing is that "djbdns.te" is passing an attribute > (djbdns_domain) as argument to the interface > "corenet_all_recvfrom_unlabeled". That doesn't seem correct, and > therefore wondering if we're even supposed to build policy for djbdns. > > Could someone kindly confirm the steps to build the Fedora selinux-policy > with "contrib"s. > The best way would be create own rpm package with updates SELinux policy, then you can install it to your system: https://github.com/fedora-selinux/selinux-policy/wiki/Packaging Thanks, Lukas. > Thanks! > -- > Jag > >> >> Thanks! >> — >> Jag -- Lukas Vrabec Senior Software Engineer, Security Technologies Red Hat, Inc.
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx
