On 2/13/2012 10:04 AM, Julian Onions wrote:
I’m working on a policy for an application made of several modules. I’d really like the policy to use the other modules interface files. The standard Makefile for policy building (/usr/share/selinux/devel/Makefile) doesn’t seem to let you include your own .if files, unless they are under /usr/share/selinux/devel/include or alternatively in the current directory (in which case it needs .te files too). Is there any way to convince it I’d like files that I’m building in project/C/policy to reference the .if files in project/B/policy and project/A/policy without copying them all to project/C/policy?
You should be able to this, with this structure: policy/layerA/foo.{te,if,fc} policy/layerB/bar.{te,if,fc} and then you run the make from the top level (the directory that has the directory named "policy"). BTW, the more appropriate place to ask this type of question would be the Reference Policy list. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.