Re: ANN: Reference Policy Release

Quoting Serge E. Hallyn (serue@us.ibm.com):
> Hmm, I'm trying to compile this as a modular policy. I've selected
> "nis = off" in my modules.conf. But I get
>
> policy/modules/admin/netutils.te:88:ERROR 'syntax error' at token
> 'nis_use_ypbind' on line 33005:
> #line 88
> nis_use_ypbind(netutils_t)
>
> when I try 'make load'.

Also, I needed the following patch to get cvs refpolicy to compile as a static policy without unconfined. Of course the offending statement was "cjp: temporary hack" :)

thanks,
-serge

Index: refpolicy/policy/modules/system/selinuxutil.te

• refpolicy.orig/policy/modules/system/selinuxutil.te 2005-12-17 22:24:11.000000000 -0600 +++ refpolicy/policy/modules/system/selinuxutil.te 2005-12-18 17:13:38.000000000 -0600 @@ -198,7 +198,9 @@ ifdef(`targeted_policy', ` # cjp: temporary hack to cover # up stray file descriptors. dontaudit load_policy_t selinux_config_t:file write; -unconfined_dontaudit_read_pipe(load_policy_t) +optional_policy(`unconfined',` + unconfined_dontaudit_read_pipe(load_policy_t) +')

 ########################################

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.