From: "Christopher J. PeBenito" <cpebenito@tresys.com>
To: kuangjiou <kuangjiou@huawei.com>,
"selinux@tycho.nsa.gov" <selinux@tycho.nsa.gov>
Subject: Re: How to build a simplified refpolicy?
Date: Tue, 22 Jul 2014 08:18:13 -0400 [thread overview]
Message-ID: <53CE5685.9060307@tresys.com> (raw)
In-Reply-To: <60ABE64B4BE4AC45964F1A967BA76CB2BB42D9@SZXEML507-MBX.china.huawei.com>
On 7/22/2014 5:16 AM, kuangjiou wrote:
> Hello,everyone!
> I am learnig SELinux recently and trying to enable the SELinux in
> Embedded Linux. As we know, the refpolicy has too much rules to use in
> the embedded devices and i also do not need so much rules in my policy.
> I just want to control the accesses to some targeted files and allow the
> accesses to the rest files. So is that possible to(and how can i) built
> my own simpolified policy to achieve this goal?
> Could anybody give me some suggestions to resolve this problem? I am
> looking forward to your replies! Thank you very much!
You should be able to compile refpolicy with just the kernel layer
modules. Then the only domain you'd have is kernel_t plus types for
handling devices and base files.
Note: this discussion is best for the refpolicy mail list instead.
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
next prev parent reply other threads:[~2014-07-22 12:18 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-07-22 9:16 How to build a simplified refpolicy? kuangjiou
2014-07-22 12:18 ` Christopher J. PeBenito [this message]
2014-07-22 12:34 ` Stephen Smalley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53CE5685.9060307@tresys.com \
--to=cpebenito@tresys.com \
--cc=kuangjiou@huawei.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.