On 11/09/2016 08:54 PM, Jeff Becker wrote:
> Hi. I successfully compiled and loaded the following policy file on
> RHEL7 with the latest (as of yesterday) SELinux rpms. However, when I
> run "seinfo -tfoo_t -x", I don't see ubac_constrained_type listed in the
> attributes. How do I enable UBAC? Thanks.
Hi Jeff,
we don't build Fedora/RHEL distribution policy with UBAC support.
You
would need to rebuild the policy from srpms to enable it.
What is your intention with UBAC?
>
> -jeff
>
> ------------------------------------------------------------ ------------------------------ ------------------------------ ------------------------------ --------
>
> policy_module(foo, 1.0.0)
>
> ########################################
> #
> # Declarations
> #
> userdom_unpriv_user_template(foo)
>
> ########################################
> #
> # foo local policy
> #
>
> domain_use_interactive_fds(foo_t)
>
> files_read_etc_files(foo_t)
>
> miscfiles_read_localization(foo_t)
>
> ubac_constrained(foo_t)
>
>
>
> _______________________________________________
> selinux mailing list -- selinux@lists.fedoraproject.org
> To unsubscribe send an email to selinux-leave@lists.fedoraproject.org
>
--
Miroslav Grepl
Senior Software Engineer, SELinux Solutions
Red Hat, Inc.