Re: Contributing to Fedora's SELinux policies

Lukas Vrabec <[email protected]> Mon, 29 Apr 2019 14:33:13 +0200
Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>
On 4/26/19 6:01 PM, Jag Raman wrote:
> 
> 
> On 4/24/2019 10:24 AM, Jag Raman wrote:
>>
>>
>>> On Apr 24, 2019, at 7:11 AM, Lukas Vrabec <[email protected]> wrote:
>>>
>>>
>>> Agree with Jason,
>>>
>>> Feel free to contribute, we'll be more than glad ;)
>>>
>>> Thanks,
>>> Lukas.
>>>
>>> On 4/23/19 11:35 PM, Jason L Tibbitts III wrote:
>>>> The selinux-policy RPM references the repository:
>>>>
>>>> URL         : https://github.com/fedora-selinux/selinux-policy
>>>>
>>>> There are several projects under https://github.com/fedora-selinux
>>>> which
>>>> might interest you.  I see that pull requests are being merged so that
>>>> seems a reasonable way to contribute.
>>>>
>>>> - J<
>>
>> Thank you very much Jason & Lukas.
>>
>> I’m trying to build the policy. After cloning the “selinux-policy" repo.,
>> we need to execute “.travis.yml” to setup the “contrib” folder. Is
>> that correct?
> 

There is no need to execute travis.yml, this file is for CI. It's enough
to clone contrib repo to selinux base repo.

> I'm facing some build issues, and would like to confirm that the
> following steps I'm following to build the policy are correct.
> 
> # git clone https://github.com/containers/container-selinux.git
> # rm -rf selinux-policy/policy/modules/contrib
> # git clone https://github.com/fedora-selinux/selinux-policy-contrib.git
> selinux-policy/policy/modules/contrib;
> # git clone https://github.com/containers/container-selinux.git
> # cp container-selinux/container.* selinux-policy/policy/modules/contrib;
> # cd selinux-policy
> # make conf
> # make policy
> 

Are you following this process?
https://github.com/fedora-selinux/selinux-policy/wiki/Compiling

> 
> One of the issues I'm facing is that "djbdns.te" is passing an attribute
> (djbdns_domain) as argument to the interface
> "corenet_all_recvfrom_unlabeled". That doesn't seem correct, and
> therefore wondering if we're even supposed to build policy for djbdns.
> > Could someone kindly confirm the steps to build the Fedora selinux-policy
> with "contrib"s.
>

The best way would be create own rpm package with updates SELinux
policy, then you can install it to your system:
https://github.com/fedora-selinux/selinux-policy/wiki/Packaging

Thanks,
Lukas.

> Thanks!
> -- 
> Jag
> 
>>
>> Thanks!
>> —
>> Jag


-- 
Lukas Vrabec
Senior Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
signature.asc (application/pgp-signature, 488 B)