Trying to update sysadm module in CLIP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



First thing ... I'm a newbie to SELinux.

I'm trying to update the sysadm module in a CLIP image. I downloaded the SELinux policy code from: https://github.com/QuarkSecurity/CLIP. I modified the sysadm policy code and built (in ~/clip/packages/clip-selinux-policy/clip-selinux-policy) using:

$ make modules APPS_MODS="sysadm"

Then I tried to install in the CLIP image using:

$ semodule -i /mnt/hdd/SELinix/sysadm.pp

and got: "tried to link in a non-MLS module with an MLS base". (I assume this means the CLIP image I'm working with is MLS?)
Next I built using:

$ make modules APPS_MODS="sysadm" TYPE="mls"

Tried to load/install the module and got: "sensitivy s10 not declared by base."

Next I tried:

$ make modules APPS_MODS="auditadm sysadm" TYPE="mls" MLS_SENS=15

and !still! got "sensitivy s10 not declared by base".

Any suggestions/thoughts?

---John
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux