Next: 6 Option of converter
Up: 5 Sample Simplified Policy
Previous: 5.2 Contents of directory
Contents
5.3 To load policy
If you modify policy in simplified_policy, you must load the modified
policy to kernel. There are some targets in Makefile.
First, you have to go /etc/selinux/seedit/src/policy.
- make reload
This converts simplified policy in simplified_policy dir into SELinux policy.
(1) policy.conf and file_contexts are generated in sepolicy dir.
(2) binary policy is created by checkpolicy from generated policy.conf.
(3) binary policy is installed in /etc/seedit/policy, file_contexts is installed in /etc/seedit/contexts/policy. And contents of base_policy/contexts is installed in /etc/seedit/contexts.
(4) binary policy is loaded by load_policy
- make relabel
After make reload, fixfiles restore runs.
- make diffrelabel
This is very useful. make relabel relabels all files, and it
takes a lot of time. On the other hand, make diffrelabel
relabels only files whose label have changed. So it takes only
some seconds. When you load policy, make diffrelabel is recommended.
2006-02-27