On 11/09/2016 08:54 PM, Jeff Becker wrote:
Hi. I successfully compiled and loaded the following policy file on
RHEL7 with the latest (as of yesterday) SELinux rpms. However, when I
run "seinfo -tfoo_t -x", I don't see ubac_constrained_type listed in the
attributes. How do I enable UBAC? Thanks.
Hi Jeff,
we don't build Fedora/RHEL distribution policy with UBAC support. You
would need to rebuild the policy from srpms to enable it.
What is your intention with UBAC?
-jeff
--------------------------------------------------------------------------------------------------------------------------------------------------------------
policy_module(foo, 1.0.0)
########################################
#
# Declarations
#
userdom_unpriv_user_template(foo)
########################################
#
# foo local policy
#
domain_use_interactive_fds(foo_t)
files_read_etc_files(foo_t)
miscfiles_read_localization(foo_t)
ubac_constrained(foo_t)
_______________________________________________
selinux mailing list -- selinux(a)lists.fedoraproject.org
To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
--
Miroslav Grepl
Senior Software Engineer, SELinux Solutions
Red Hat, Inc.