Re: Contributing to Fedora's SELinux policies

Lukas Vrabec <[email protected]> Mon, 29 Apr 2019 17:30:32 +0200
Newsgroups	gmane.linux.redhat.fedora.selinux
Organization	Red Hat, Inc.
Message-ID	<[email protected]>
On 4/29/19 5:22 PM, Jag Raman wrote:
> 
> 
> On 4/29/2019 8:33 AM, Lukas Vrabec wrote:
>> On 4/26/19 6:01 PM, Jag Raman wrote:
>>>
>>>
>>> On 4/24/2019 10:24 AM, Jag Raman wrote:
>>>>
>>>>
>>>>> On Apr 24, 2019, at 7:11 AM, Lukas Vrabec <[email protected]> wrote:
>>>>>
>>>>>
>>>>> Agree with Jason,
>>>>>
>>>>> Feel free to contribute, we'll be more than glad ;)
>>>>>
>>>>> Thanks,
>>>>> Lukas.
>>>>>
>>>>> On 4/23/19 11:35 PM, Jason L Tibbitts III wrote:
>>>>>> The selinux-policy RPM references the repository:
>>>>>>
>>>>>> URL         : https://github.com/fedora-selinux/selinux-policy
>>>>>>
>>>>>> There are several projects under https://github.com/fedora-selinux
>>>>>> which
>>>>>> might interest you.  I see that pull requests are being merged so
>>>>>> that
>>>>>> seems a reasonable way to contribute.
>>>>>>
>>>>>> - J<
>>>>
>>>> Thank you very much Jason & Lukas.
>>>>
>>>> I’m trying to build the policy. After cloning the “selinux-policy"
>>>> repo.,
>>>> we need to execute “.travis.yml” to setup the “contrib” folder. Is
>>>> that correct?
>>>
>>
>> There is no need to execute travis.yml, this file is for CI. It's enough
>> to clone contrib repo to selinux base repo.
>>
>>> I'm facing some build issues, and would like to confirm that the
>>> following steps I'm following to build the policy are correct.
>>>
>>> # git clone https://github.com/containers/container-selinux.git
>>> # rm -rf selinux-policy/policy/modules/contrib
>>> # git clone https://github.com/fedora-selinux/selinux-policy-contrib.git
>>> selinux-policy/policy/modules/contrib;
>>> # git clone https://github.com/containers/container-selinux.git
>>> # cp container-selinux/container.*
>>> selinux-policy/policy/modules/contrib;
>>> # cd selinux-policy
>>> # make conf
>>> # make policy
>>>
>>
>> Are you following this process?
>> https://github.com/fedora-selinux/selinux-policy/wiki/Compiling
> 
> Thank you very much for the wiki.
> 
> I was executing "make conf; make policy", which appears to be a mistake.
> Running "make policy" alone works. It looks like the conf. is
> distributed as part of the repo.
> 
> Thanks for the help!
>

You're welcome ;)

Looking forward for patches.

Lukas.

 --
> Jag
> 
>>
>>>
>>> One of the issues I'm facing is that "djbdns.te" is passing an attribute
>>> (djbdns_domain) as argument to the interface
>>> "corenet_all_recvfrom_unlabeled". That doesn't seem correct, and
>>> therefore wondering if we're even supposed to build policy for djbdns.
>>>> Could someone kindly confirm the steps to build the Fedora
>>>> selinux-policy
>>> with "contrib"s.
>>>
>>
>> The best way would be create own rpm package with updates SELinux
>> policy, then you can install it to your system:
>> https://github.com/fedora-selinux/selinux-policy/wiki/Packaging
>>
>> Thanks,
>> Lukas.
>>
>>> Thanks!
>>> -- 
>>> Jag
>>>
>>>>
>>>> Thanks!
>>>> —
>>>> Jag
>>
>>


-- 
Lukas Vrabec
Senior Software Engineer, Security Technologies
Red Hat, Inc.

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
signature.asc (application/pgp-signature, 488 B)