Conditions: Install from DVD Download of Tresys tools Installation of several RPMs that were needed to compile these tools yum update of system.
Problem: I can't build the Tresys tools for user account modification. I had been doing this in the past:
#1. useradd -m developer #2. passwd developer #3. sed -i -e /user\ root/a\ user\ developer\ roles\ {\ staff_r\ \ sysadm_r\ }; /etc/security/selinux/src/policy/users
#4. cd /etc/security/selinux/src/policy #5. make policy #6. make load
I asked the SEL list about this and it was recommeded that I try Tresys setools? seuser, seuseradd?.
Problem is, I can't build them I keep getting a message about TCL being in the wrong place?
Anyone seen this? This is a new install, without deviations from what needs to be done initially. I would think this would be a pretty common problem
I obviously can't do my old procedure since the policy source wasn't installed.
Thanks
Nix
On Wed, 2004-04-28 at 21:27 -0500, Nick wrote:
I asked the SEL list about this and it was recommeded that I try Tresys setools? seuser, seuseradd?.
Problem is, I can't build them I keep getting a message about TCL being in the wrong place?
The setools and setools-gui packages are both available in Rawhide at the moment.
Here are the latest packages from the www.kernel.org mirror.
http://mirrors.kernel.org/fedora/core/development/i386/Fedora/RPMS/setools-1... http://mirrors.kernel.org/fedora/core/development/i386/Fedora/RPMS/setools-g...
On Wed, 2004-04-28 at 22:27, Nick wrote:
I obviously can't do my old procedure since the policy source wasn't installed.
The Tresys setools depend on policy-sources, so you'll still need them anyway. yum install checkpolicy policy-sources. IMHO, they should be installed by default unless someone explicitly chooses minimal install.
The Tresys setools depend on policy-sources, so you'll still need them anyway. yum install checkpolicy policy-sources. IMHO, they should be installed by default unless someone explicitly chooses minimal install.
As I just noted on another thread, in the next couple of weeks we will release v1.4 of setools that will enable our core library to work directly off the policy binary. For the tools that just look at the policy (seinfo, apol, sesearch,...), the dependency on policy sources will no longer be required.
Of course to change the policy (e.g., seuseradd) policy sources will still be required but we're hoping that dependency will be eliminated (or mitigated) following release of the policy binary module infrastructure due out later this summer.
Frank
selinux@lists.fedoraproject.org