From: thomas@chaschperli.ch (Thomas) Date: Tue, 17 Jan 2017 06:05:26 +0100 Subject: [refpolicy] Install Directory for Reference Policy? In-Reply-To: References: Message-ID: <8978CC35-BED8-451C-BB84-F2335A256ADE@chaschperli.ch> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com Did you follow the guide? https://github.com/TresysTechnology/refpolicy/wiki/UseRefpolicy And i think semanage requires the -S switch to operate on a non loaded policy store: -S, --store Select and alternate SELinux store to manage -thomas Am 17. Januar 2017 05:24:40 MEZ schrieb Naftuli Kay via refpolicy : >I'm on Ubuntu 16.04 and I've just compiled the reference policy via: > >git clone https://github.com/TresysTechnology/refpolicy.git >cd refpolicy >git submodule init >git submodule update >git checkout RELEASE_2_20161023 >( cd policy/modules/contrib && git checkout RELEASE_2_20161023 ) >make conf >make install > >My build.conf looks like this: > >TYPE = standard >NAME = refpolicy >DISTRO = debian >UNK_PERMS = deny >DIRECT_INITRC = n >SYSTEMD = y >MONOLITHIC = n >UBAC = y >CUSTOM_BUILDOPT = >MLS_SENS = 16 >MLS_CATS = 1024 >MCS_CATS = 1024 >QUIET = n > >Pretty normal stuff. > >Unfortunately, though it properly loads at the time of "make install," >it isn't installed into the expected directory by my distro. >Apparently, Ubuntu wants the binary files to be located at >/etc/selinux/$NAME. The upstream "selinux-policy-default" package >installs its dependencies to /etc/selinux/default and its contents can >be viewed here: http://pastebin.com/8fXvdFUA > >Is there a variable I need to set to have the reference policy install >itself/copy its files following this pattern to >/etc/selinux/refpolicy? >_______________________________________________ >refpolicy mailing list >refpolicy at oss.tresys.com >http://oss.tresys.com/mailman/listinfo/refpolicy -------------- next part -------------- An HTML attachment was scrubbed... URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20170117/3333b8d0/attachment.html