| ======= | |
| SELinux | |
| ======= | |
| If you want to use SELinux, chances are you will want | |
| to use the distro-provided policies, or install the | |
| latest reference policy release from | |
| http://oss.tresys.com/projects/refpolicy | |
| However, if you want to install a dummy policy for | |
| testing, you can do using ``mdp`` provided under | |
| scripts/selinux. Note that this requires the selinux | |
| userspace to be installed - in particular you will | |
| need checkpolicy to compile a kernel, and setfiles and | |
| fixfiles to label the filesystem. | |
| 1. Compile the kernel with selinux enabled. | |
| 2. Type ``make`` to compile ``mdp``. | |
| 3. Make sure that you are not running with | |
| SELinux enabled and a real policy. If | |
| you are, reboot with selinux disabled | |
| before continuing. | |
| 4. Run install_policy.sh:: | |
| cd scripts/selinux | |
| sh install_policy.sh | |
| Step 4 will create a new dummy policy valid for your | |
| kernel, with a single selinux user, role, and type. | |
| It will compile the policy, will set your ``SELINUXTYPE`` to | |
| ``dummy`` in ``/etc/selinux/config``, install the compiled policy | |
| as ``dummy``, and relabel your filesystem. |