Hi. I successfully compiled and loaded the following policy file on RHEL7 with the latest (as of yesterday) SELinux rpms. However, when I run "seinfo -tfoo_t -x", I don't see ubac_constrained_type listed in the attributes. How do I enable UBAC? Thanks.

-jeff

--------------------------------------------------------------------------------------------------------------------------------------------------------------

policy_module(foo, 1.0.0)

########################################
#
# Declarations
#
userdom_unpriv_user_template(foo)

########################################
#
# foo local policy
#

domain_use_interactive_fds(foo_t)

files_read_etc_files(foo_t)

miscfiles_read_localization(foo_t)

ubac_constrained(foo_t)