Change build.conf to default to modular policy builds
PATCH 1/1 Change build.conf to default to modular policy builds
Change build.conf to default to modular policy builds rather than monolithic policy builds. Rationale: All modern Linux distributions that incorporate SELinux support have switched to using modular policy, and many of the policy tools (semodule, semanage, and even modern versions of setsebool) only work if using modular policy.
---
P.S. Are there any other build.conf defaults that should be changed (e.g. TYPE, UNK_PERMS, DIRECT_INITRC)? What do Debian and Ubuntu use for their default policy builds?
build.conf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
build.conf +3 -3
@@ -44,9 +44,9 @@ NAME = refpolicy # not work in conditional policy. DIRECT_INITRC = n -# Build monolithic policy. Putting n here -# will build a loadable module policy. -MONOLITHIC = y +# Build monolithic policy. Putting y here +# will build a monolithic policy. +MONOLITHIC = n # User-based access control (UBAC) # Enable UBAC for role separations.
Signature · 2 lines
Stephen Smalley National Security Agency
PATCH 1/1 Change build.conf to default to modular policy builds
Quoted 7 lines · Stephen Smalley
Change build.conf to default to modular policy builds rather than monolithic policy builds. Rationale: All modern Linux distributions that incorporate SELinux support have switched to using modular policy, and many of the policy tools (semodule, semanage, and even modern versions of setsebool) only work if using modular policy.
Signed-off-by Stephen Smalley <[email protected]>
Merged.
Quoted 29 lines
---
P.S. Are there any other build.conf defaults that should be changed (e.g. TYPE,UNK_PERMS,DIRECT_INITRC)? What do Debian and Ubuntu use for their default policy builds?build.conf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)build.conf +3
-3@@ -44,9 +44,9 @@ NAME = refpolicy # not work in conditional policy. DIRECT_INITRC = n -# Build monolithic policy. Putting n here -# will build a loadable module policy. -MONOLITHIC = y +# Build monolithic policy. Putting y here +# will build a monolithic policy. +MONOLITHIC = n # User-based access control (UBAC) # Enable UBAC for role separations.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com