Blame view

Documentation/security/SELinux.txt 1.02 KB
93c06cbbf   Serge E. Hallyn   selinux: add supp...
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
  If you want to use SELinux, chances are you will want
  to use the distro-provided policies, or install the
  latest reference policy release from
  	http://oss.tresys.com/projects/refpolicy
  
  However, if you want to install a dummy policy for
  testing, you can do using 'mdp' provided under
  scripts/selinux.  Note that this requires the selinux
  userspace to be installed - in particular you will
  need checkpolicy to compile a kernel, and setfiles and
  fixfiles to label the filesystem.
  
  	1. Compile the kernel with selinux enabled.
  	2. Type 'make' to compile mdp.
  	3. Make sure that you are not running with
  	   SELinux enabled and a real policy.  If
  	   you are, reboot with selinux disabled
  	   before continuing.
  	4. Run install_policy.sh:
  		cd scripts/selinux
  		sh install_policy.sh
  
  Step 4 will create a new dummy policy valid for your
  kernel, with a single selinux user, role, and type.
  It will compile the policy, will set your SELINUXTYPE to
  dummy in /etc/selinux/config, install the compiled policy
  as 'dummy', and relabel your filesystem.