From: domg472@gmail.com (Dominick Grift) Date: Fri, 10 Jun 2011 18:05:42 +0200 Subject: [refpolicy] What is the best way to trim out modules, apps from refpolicy when building monolithic policy. In-Reply-To: References: Message-ID: <1307721943.2645.21.camel@localhost.localdomain> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Wnen you do "make config" it creates a modules.conf i believe. You can remove modules from that file and then those should not be built i believe. You can also include a custom modules.conf in your package and replace that by the one that is generated before you actually compile the policy. Fedora does this as well because it wants to use a different collection of modules depending on the policy model. e.g. include this model is the model is targeted but exclude it if the model is mls etc. But you can also just remove the modules. The eclipse-slide Selinux ide also gives the possibility to include/exclude modules in the project properties. On Fri, 2011-06-10 at 08:56 -0700, Sam Gandhi wrote: > Hello, > > I want try and build monolithic policy based on the reference policy > available via refpolicy.git (git clone > http://oss.tresys.com/git/refpolicy.git) > > I have made changes to top level build.conf file to set MONOLITHIC = y. > > But I haven't yet come across way to trim out apps/ and modules we > don't run on our device. > > Is there easy way to specify this or I should just removing files from > policy/modules/ & modules which I know don't run on our device > unwanted files? > > The target I am working with has only 64MB memory and 256MB flash. > > -Sam > _______________________________________________ > refpolicy mailing list > refpolicy at oss.tresys.com > http://oss.tresys.com/mailman/listinfo/refpolicy -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20110610/ce91595b/attachment.bin