34 lines · plain
1=======2SELinux3=======4 5If you want to use SELinux, chances are you will want6to use the distro-provided policies, or install the7latest reference policy release from8 9 https://github.com/SELinuxProject/refpolicy10 11However, if you want to install a dummy policy for12testing, you can do using ``mdp`` provided under13scripts/selinux. Note that this requires the selinux14userspace to be installed - in particular you will15need checkpolicy to compile a kernel, and setfiles and16fixfiles to label the filesystem.17 18 1. Compile the kernel with selinux enabled.19 2. Type ``make`` to compile ``mdp``.20 3. Make sure that you are not running with21 SELinux enabled and a real policy. If22 you are, reboot with selinux disabled23 before continuing.24 4. Run install_policy.sh::25 26 cd scripts/selinux27 sh install_policy.sh28 29Step 4 will create a new dummy policy valid for your30kernel, with a single selinux user, role, and type.31It will compile the policy, will set your ``SELINUXTYPE`` to32``dummy`` in ``/etc/selinux/config``, install the compiled policy33as ``dummy``, and relabel your filesystem.34