I am (SELinux newbie) working on a project which will require me to add new object classes to my policy. After doing much reading, I find that in order to add object classes I must modify and build the base policy (??). My approach is to download the source for the policy, modify it with the new object classes and TE rules, and build it. My first step is to try and simply build the strict (or any) policy from the sources. I get a syntax error when trying to build the policy. My steps are:

rpm -i selinux-policy-2.4.6-137.1.el5.src.rpm
cd /usr/src/redhat/SPECS
rpmbuild -bp selinux-policy.spec
cd /usr/src/redhat/BUILD/serefpolicy-2.4.6
make conf
make

which results in the following failure:

/usr/bin/checkpolicy policy.conf -o policy.21
/usr/bin/checkpolicy:  loading policy configuration from policy.conf
policy/modules/services/fail2ban.te:59:ERROR 'syntax error' at token 'corenet_tcp_connect_whois_port' on line 439903:
 
corenet_tcp_connect_whois_port(fail2ban_t)
checkpolicy:  error(s) encountered while parsing configuration
make: *** [policy.21] Error 1


some possibly relevant packages are:

checkpolicy.i386                         1.33.1-4.el5           installed      
policycoreutils.i386                     1.33.12-14.el5         installed      
policycoreutils-gui.i386                 1.33.12-14.el5         installed      
policycoreutils-newrole.i386             1.33.12-14.el5         installed      
selinux-policy.noarch                    2.4.6-137.1.el5        installed      
selinux-policy-devel.noarch              2.4.6-137.1.el5        installed      
selinux-policy-mls.noarch                2.4.6-137.1.el5        installed      
selinux-policy-strict.noarch             2.4.6-137.1.el5        installed      
selinux-policy-targeted.noarch           2.4.6-137.1.el5        installed   
libselinux.i386                          1.33.4-5.el5           installed      
libselinux-devel.i386                    1.33.4-5.el5           installed      
libselinux-python.i386                   1.33.4-5.el5           installed      
libsemanage.i386                         1.9.1-3.el5            installed      
libsepol.i386                            1.15.2-1.el5           installed      
libsepol-devel.i386                      1.15.2-1.el5           installed 
setools.i386                             3.0-3.el5              installed
setools-devel.i386                       3.0-3.el5              installed      
setools-gui.i386                         3.0-3.el5              installed      
setroubleshoot.noarch                    2.0.5-3.el5            installed      
setroubleshoot-plugins.noarch            2.0.4-2.el5            installed      
setroubleshoot-server.noarch             2.0.5-3.el5            installed     

Any help would be greatly appreciated,

Andy