Changeset 237

Show
Ignore:
Timestamp:
08/13/08 15:44:14 (3 months ago)
Author:
slawrence
Message:

Install the selinux-relabel script to relabel the filesystem after rebooting after installing clip selinux policy
Update README

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/RHEL5.2/README

    r236 r237  
    3535* Update the selinux toolchain 
    3636 
    37         ARCH=`uname -i` 
     37        Note: In the follow commands, replace $ARCH with your system architecture (either i386 or x86_64) 
    3838 
    3939        cd clip/selinux-usr 
    …… 
    6060        make clip-rpm selinux-policy-clip-rpm 
    6161 
    62 * Copy the following rpms needed for the production system to a cd or usb drive: 
     62* You will need to install the following rpms on the production (See the INSTALL file for details on installing the production system): 
    6363 
    6464        clip/RPM/clip-2.0-1.$ARCH.rpm 
    …… 
    7171        clip/RPM/policycoreutils-newrole-1.34.16-1.$ARCH.rpm 
    7272        clip/RPM/checkpolicy-1.34.7-1.$ARCH.rpm 
    73  
    74 * See the INSTALL file for installing the clip production system and the rpms    

  • trunk/RHEL5.2/refpolicy/conf/selinux-policy-modular.spec

    r235 r237  
    4141make NAME=%{polname} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/selinux/%{polname}/contexts/netfilter_contexts 
    4242make NAME=%{polname} DESTDIR=$RPM_BUILD_ROOT install 
     43# install relabel script 
     44%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/init.d 
     45make NAME=%{polname} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/init.d/selinux-relabel 
    4346 
    4447%clean 
    …… 
    7275%config %{_sysconfdir}/selinux/%{polname}/users/system.users 
    7376%config %{_sysconfdir}/selinux/%{polname}/users/local.users 
     77%{_sysconfdir}/init.d/selinux-relabel 
    7478#%ghost %dir %{_sysconfdir}/selinux/*/modules 
    7579 
    …… 
    100104echo "" > /etc/selinux/%{polname}/booleans 
    101105touch /.autorelabel 
     106#relabel the fs 
     107chkconfig --del selinux-relabel 2>/dev/null 
     108chkconfig --add selinux-relabel 
     109%{_sysconfdir}/init.d/selinux-relabel start 
     110%{_sysconfdir}/init.d/selinux-relabel switch clip enforcing  
     111echo "**********************************************************************" 
     112echo "The loading of the clip selinux policy has failed because of changes" 
     113echo "in class definitions.  This is expected behavior.  You must reboot for" 
     114echo "the clip selinux policy to load." 
     115echo "**********************************************************************" 
    102116echo "Please reboot the system *now*" 
    103117exit 0 

  • trunk/RHEL5.2/refpolicy/conf/selinux-policy-monolithic.spec

    r235 r237  
    4141make NAME=%{polname} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/selinux/%{polname}/contexts/netfilter_contexts 
    4242make NAME=%{polname} DESTDIR=$RPM_BUILD_ROOT install 
     43# install relabel script 
     44%{__mkdir} -p $RPM_BUILD_ROOT/%{_sysconfdir}/init.d 
     45make NAME=%{polname} DESTDIR=$RPM_BUILD_ROOT $RPM_BUILD_ROOT%{_sysconfdir}/init.d/selinux-relabel 
    4346 
    4447%clean 
    …… 
    7275%config %{_sysconfdir}/selinux/%{polname}/users/system.users 
    7376%config %{_sysconfdir}/selinux/%{polname}/users/local.users 
     77%{_sysconfdir}/init.d/selinux-relabel 
    7478#%ghost %dir %{_sysconfdir}/selinux/*/modules 
    7579 
    …… 
    9397echo "" > /etc/selinux/%{polname}/booleans 
    9498touch /.autorelabel 
     99#relabel the fs 
     100chkconfig --del selinux-relabel 2>/dev/null 
     101chkconfig --add selinux-relabel 
     102%{_sysconfdir}/init.d/selinux-relabel start 
     103%{_sysconfdir}/init.d/selinux-relabel switch clip enforcing  
     104echo "**********************************************************************" 
     105echo "The loading of the clip selinux policy has failed because of changes" 
     106echo "in class definitions.  This is expected behavior.  You must reboot for" 
     107echo "the clip selinux policy to load." 
     108echo "**********************************************************************" 
    95109echo "Please reboot the system *now*" 
    96110exit 0 

  • trunk/RHEL5.2/refpolicy/src/selinux-policy-clip/Makefile

    r230 r237  
    158158headerdir = $(modpkgdir)/include 
    159159docsdir = $(prefix)/share/doc/$(PKGNAME) 
     160initdir = $(DESTDIR)/etc/init.d 
    160161 
    161162# enable MLS if requested. 
    …… 
    491492######################################## 
    492493# 
     494# Install relabel script 
     495# 
     496$(initdir)/selinux-relabel: support/selinux-relabel 
     497        @mkdir -p $(initdir) 
     498        @echo "Installing selinux-relabel" 
     499        $(verbose) $(INSTALL) -b -m 755 $< $@ 
     500 
     501######################################## 
     502# 
    493503# Build Appconfig files 
    494504#