Re: Add a new class

[Joshua Brindle <jbrindle@tresys.com>]

Check the files in policy/flask

specifically you must add the class to security_classes and the 
permissions to access_vectors and then rebuild the headers with the 
Makefile in the flask directory and put them in 
linux/security/selinux/include/

then reboot on the new kernel and build a policy with the new classes 
and access vectors, it should be fairly straightforward and no problems 
should occur.

Joshua Brindle

Trent Jaeger wrote:

>
> Hi,
>
> I think this is something I could find in the docs or code, but I 
> don't see it.  
>
> How do I add a new class?  There are a variety of files in 
> security/selinux/include, such as av_permissions.h, that are 
> "automatically generated", but they are already in the distribution, 
> so it is not clear how they are generated.  If I add a class, 
> operations, etc., these files have to be modified and I would rather 
> do it the proper way.
>
> BTW -- this is for adding IPSec security associations for classes, so 
> we can label network connections.  Prototype code should be available 
> soon.
>
> Regards,
> Trent.
> ------------------------------------------------------------
> Trent Jaeger
> IBM T.J. Watson Research Center
> 19 Skyline Drive, Hawthorne, NY 10532
> (914) 784-7225, FAX (914) 784-7225 



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.