Re: Problems installing current version of refpolicy with FC6

[Catalin DIMA <dima@univ-paris12.fr>]

Karl MacMillan wrote:

> Just to check - are you certain that you want the full policy? You may 
> be able to do the teaching you need with policy modules only.

Do you mean I should compile&load the modular policy ? I certainly would 
like to do this, as it's supposed to be easily configurable & suitable 
for experimenting small modules.

> Did you enable mcs? The standard FC6 policy is targeted-mcs and the 
> presence of the mcs components in the file system labels may be the 
> cause of your problems.

I tried again this build.conf format :

TYPE = targeted-mcs
NAME = refpolicy
DISTRO = redhat
DIRECT_INITRC=n
MONOLITHIC=n
MLS-SENS=16
MLS_CATS=256

Done make conf, make install and make load, then configured for 
refpolicy & asked for relabeling, and the system gets stuck...

Btw, forgot to mention the libsepol.sepol_genbools: error while reading 
/etc/selinx/refpolicy/booleans error...

In permissive refpolicy mode, the only selinux message talks about 
NetworkManager.

> The unknown boolean messages should be harmless I believe.
>
> You can extract the build.conf from the policy source rpm as well, 
> which is likely a good starting point.

The problem is the same with the rpm and the bz2...

Thanks,
Catalin.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.