Hi. I successfully compiled and loaded the following policy file on RHEL7
with the latest (as of yesterday) SELinux rpms. However, when I run "seinfo
-tfoo_t -x", I don't see ubac_constrained_type listed in the attributes.
How do I enable UBAC? Thanks.
-jeff
--------------------------------------------------------------------------------------------------------------------------------------------------------------
policy_module(foo, 1.0.0)
########################################
#
# Declarations
#
userdom_unpriv_user_template(foo)
########################################
#
# foo local policy
#
domain_use_interactive_fds(foo_t)
files_read_etc_files(foo_t)
miscfiles_read_localization(foo_t)
ubac_constrained(foo_t)