On 05/10/2016 09:39 AM, Petr Lautrbach wrote: > The man page's example suggested to use -g instead of -E > > Signed-off-by: Petr Lautrbach <plautrba@xxxxxxxxxx> > --- > policycoreutils/semodule/semodule.8 | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/policycoreutils/semodule/semodule.8 b/policycoreutils/semodule/semodule.8 > index 6db390c..e5b54b3 100644 > --- a/policycoreutils/semodule/semodule.8 > +++ b/policycoreutils/semodule/semodule.8 > @@ -121,7 +121,7 @@ $ semodule \-B \-p "/tmp" > $ semodule \-B \-S "/tmp/var/lib/selinux" > # Write the HLL version of puppet and the CIL version of wireshark > # modules at priority 400 to the current working directory > -$ semodule \-X 400 \-g wireshark \-\-cil \-g puppet \-\-hll > +$ semodule \-X 400 \-E wireshark \-\-cil \-E puppet \-\-hll Actually this command extracts the HLL version of wireshark and the CIL version of puppet (it creates wireshark.pp and puppet.cil on my system with checkpolicy 2.5). In order to do what the comment suggests, the --cil and --hll flags need to be set before the -E options: semodule -X 400 --cil -E wireshark --hll -E puppet. -- Nicolas _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
