libselinux-2.0.80-5.2.i586 libsepol1-2.0.36-2.2.i586 libsemanage1-2.0.31-4.1.i586 policycoreutils-2.0.62-3.1.i586 checkpolicy-2.0.19-2.2.i586 -----Original Message----- From: Stephen Smalley [mailto:sds@xxxxxxxxxxxxx] Sent: Wednesday, February 17, 2010 4:37 PM To: Alan Rouse Cc: 'selinux@xxxxxxxxxxxxx' Subject: RE: SELinux Policy in OpenSUSE 11.2 On Wed, 2010-02-17 at 16:29 -0500, Stephen Smalley wrote: > On Wed, 2010-02-17 at 16:11 -0500, Alan Rouse wrote: > > 1. Is there supposed to be an environment variable $SELINUXTYPE? I don't have one... > > Defined by /etc/selinux/config > . /etc/selinux/config > > > 2. When I do "make load", the policy file in > > > > /etc/selinux/refpolicy-standard/policy/policy.24 > > > > is replaced (at least, it gets a new timestamp). > > Ok, and what happens when you run setsebool -P init_upstart=1? > That file should also get regenerated. > > > /etc/selinux/config contains: > > > > SELINUX=permissive > > SELINUXTYPE=refpolicy-standard > > > > 3. ls -l /etc/selinux/refpolicy-standard/policy > > > > -rw-r--r--. 1 root root 3686162 Feb 17 16:05 policy.24 > > > > 4. cat /selinux/policyvers > > > > <nothing>... File is empty > > What? grep selinuxfs /proc/mounts > ls /selinux > > > 5. checkpolicy -V > > > > 24 (compatibility range 24-15) BTW, it would be useful to know the versions of the selinux userland (libsepol, libselinux, libsemanage, policycoreutils, checkpolicy) that are in OpenSUSE 11.2. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
