On 3/8/06, Stephen Smalley <sds@tycho.nsa.gov> wrote:
On Wed, 2006-03-08 at 12:44 -0500, Florian Lengyel wrote:
> Is this the appropriate list to ask about modifying local Selinux
> policies on Red Hat Enterprise Linux 4? If it is, can someone inform
> me what i need to download in order to modify the local Selinux
> policy? The source and tools to do this don't seem to be included in
> my installation (following the online Red Hat documentation); perhaps
> there are appropriate rpms to download in up2date--I don't know what
> they are, and they do not seem to be mentioned in the online
> documentation.
>
> If this is not the appropriate list, please let me know.

Thank you for this; you have jogged my memory that I am missing
precisely those sources In the /etc/selinux/targeted/policy subdirectory
[root@cml policy]# pwd
/etc/selinux/targeted/policy

There is a file called policy.18

[root@cml policy]# ls -latrs
total 348
332 -rw-r--r--  1 root root 331417 Mar  8  2005 policy.18
  8 drwxr-xr-x  4 root root   4096 Aug 25  2005 ..
  8 drwxr-xr-x  2 root root   4096 Aug 25  2005 .
[root@cml policy]#          
 
but there is no /etc/selinux/policy/sources subdirectory

The checkpolicy command is present:

[root@cml policy]# pwd
/etc/selinux/targeted/policy
[root@cml policy]# ls -latrs
total 348
332 -rw-r--r--  1 root root 331417 Mar  8  2005 policy.18
  8 drwxr-xr-x  4 root root   4096 Aug 25  2005 ..
  8 drwxr-xr-x  2 root root   4096 Aug 25  2005 .
[root@cml policy]#          

So I am missing the source directory. I wonder if the missing components are downloadable in rpm form...

Look for selinux-policy-targeted-sources.
That contains the policy sources.
Also look for checkpolicy.  That is the policy "compiler".

--
Stephen Smalley
National Security Agency