Miroslav,
We are intetested in the approved SELinux config listed in the NSA Commercial Solutions for Classified Program.
Our goal is to eventually conduct research as a NISP Corporation. How do we get hardcopies of sourced software and policies for Information Assurance?
Dennis Sherrell
Sherrell Consulting
Company #136601
Cisco Certified Wireless Specialist
On Wed, Mar 23, 2016, 12:56 AM Miroslav Grepl <mgrepl@xxxxxxxxxx> wrote:
On 03/22/2016 08:48 PM, Stephen Smalley wrote:
> On 03/22/2016 01:51 PM, Naina Emmanuel wrote:
>> Good evening!
>> i am working on selinux, centos 7... i have downloaded some .te files
>> from the internet (squid.te, ftp.te, rpc.te, samba.te .. etc)
>> but when i compile these .te file through #make -f
>> /usr/share/selinux/devel/include/MakeFile but shows error in all
>> mentioned .te files
>> not even getting installed through #semodule -i ftp.pp (for all
>> mentioned .te files) plz help me regarding this..
>> thanks in advanced
>
> Please show the actual commands that you ran, and the actual error
> output from those commands.
>
> However, downloading random .te files from the Internet and expecting
> them to build or install on your system is probably not a good strategy.
> On CentOS, you should be able to download the .src.rpm file for
> selinux-policy-targeted and work with the files it contains in order to
> ensure that they match your base policy.
Even more if you want to replace a module shipped by a distribution
policy and you will miss some definitions which are used in other
modules, you will also fail.
So I would go with .src.rpm how Stephen wrote above. You can ask on
selinux@xxxxxxxxxxxxxxxxxxxxxxx for more details.
Thanks.
>
>
> _______________________________________________
> Selinux mailing list
> Selinux@xxxxxxxxxxxxx
> To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
> To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
>
--
Miroslav Grepl
Senior Software Engineer, SELinux Solutions
Red Hat, Inc.
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
_______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
