On 4/29/2019 8:33 AM, Lukas Vrabec wrote:
> On 4/26/19 6:01 PM, Jag Raman wrote:
>>
>>
>> On 4/24/2019 10:24 AM, Jag Raman wrote:
>>>
>>>
>>>> On Apr 24, 2019, at 7:11 AM, Lukas Vrabec <lvrabec(a)redhat.com>
wrote:
>>>>
>>>>
>>>> Agree with Jason,
>>>>
>>>> Feel free to contribute, we'll be more than glad ;)
>>>>
>>>> Thanks,
>>>> Lukas.
>>>>
>>>> On 4/23/19 11:35 PM, Jason L Tibbitts III wrote:
>>>>> The selinux-policy RPM references the repository:
>>>>>
>>>>> URL :
https://github.com/fedora-selinux/selinux-policy
>>>>>
>>>>> There are several projects under
https://github.com/fedora-selinux
>>>>> which
>>>>> might interest you. I see that pull requests are being merged so
>>>>> that
>>>>> seems a reasonable way to contribute.
>>>>>
>>>>> - J<
>>>
>>> Thank you very much Jason & Lukas.
>>>
>>> I’m trying to build the policy. After cloning the “selinux-policy"
>>> repo.,
>>> we need to execute “.travis.yml” to setup the “contrib” folder. Is
>>> that correct?
>>
>
> There is no need to execute travis.yml, this file is for CI. It's enough
> to clone contrib repo to selinux base repo.
>
>> I'm facing some build issues, and would like to confirm that the
>> following steps I'm following to build the policy are correct.
>>
>> # git clone
https://github.com/containers/container-selinux.git
>> # rm -rf selinux-policy/policy/modules/contrib
>> # git clone
https://github.com/fedora-selinux/selinux-policy-contrib.git
>> selinux-policy/policy/modules/contrib;
>> # git clone
https://github.com/containers/container-selinux.git
>> # cp container-selinux/container.*
>> selinux-policy/policy/modules/contrib;
>> # cd selinux-policy
>> # make conf
>> # make policy
>>
>
> Are you following this process?
>
https://github.com/fedora-selinux/selinux-policy/wiki/Compiling
Thank you very much for the wiki.
I was executing "make conf; make policy", which appears to be a mistake.
Running "make policy" alone works. It looks like the conf. is
distributed as part of the repo.
Thanks for the help!
Jag
>
>>
>> One of the issues I'm facing is that "djbdns.te" is passing an
attribute
>> (djbdns_domain) as argument to the interface
>> "corenet_all_recvfrom_unlabeled". That doesn't seem correct, and
>> therefore wondering if we're even supposed to build policy for djbdns.
>>> Could someone kindly confirm the steps to build the Fedora
>>> selinux-policy
>> with "contrib"s.
>>
>
> The best way would be create own rpm package with updates SELinux
> policy, then you can install it to your system:
>
https://github.com/fedora-selinux/selinux-policy/wiki/Packaging
>
> Thanks,
> Lukas.
>
>> Thanks!
>> --
>> Jag
>>
>>>
>>> Thanks!
>>> —
>>> Jag
>
>
--
Lukas Vrabec
Senior Software Engineer, Security Technologies
Red Hat, Inc.