Building multiple custom modules

Building multiple custom modules

[Julian Onions]

[-- Attachment #1: Type: text/plain, Size: 631 bytes --]

I'm working on a policy for an application made of several modules. I'd really like the policy to use the other modules interface files.

The standard Makefile for policy building (/usr/share/selinux/devel/Makefile) doesn't seem to let you include your own .if files, unless they are under /usr/share/selinux/devel/include or alternatively in the current directory (in which case it needs .te files too).

Is there any way to convince it I'd like files that I'm building in project/C/policy to reference the .if files in project/B/policy and project/A/policy without copying them all to project/C/policy?

Thanks,
Julian


[-- Attachment #2: Type: text/html, Size: 2595 bytes --]

Re: Building multiple custom modules

[Christopher J. PeBenito]

On 2/13/2012 10:04 AM, Julian Onions wrote:
> I’m working on a policy for an application made of several modules. I’d really like the policy to use the other modules interface files.
>
> The standard Makefile for policy building (/usr/share/selinux/devel/Makefile) doesn’t seem to let you include your own .if files, unless they are under /usr/share/selinux/devel/include or alternatively in the current directory (in which case it needs .te files too).
>
> Is there any way to convince it I’d like files that I’m building in project/C/policy to reference the .if files in project/B/policy and project/A/policy without copying them all to project/C/policy?

You should be able to this, with this structure:

policy/layerA/foo.{te,if,fc}
policy/layerB/bar.{te,if,fc}

and then you run the make from the top level (the directory that has the directory named "policy").  BTW, the more appropriate place to ask this type of question would be the Reference Policy list.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.