SELinux - where to 'make load'?

[Lawless]

I'm trying to get SELinux working.
First I followed the Null Selinux Howto - now I'm trying to load the policies.
The Gentoo SELinux handbook tells me to go to /etc/security/selinux/src/policy and do a 'make load' but I do not have this directory.
After installing selinux-base-policy I do have an /etc/selinux - but I found nothing where I could do the make.

Did I forget something that prevented the creation of this directory?
_________________
Kernel panic: I have no root and I want to scream

[nixnut]

You do that in the directory where the source are. Alternatively, just use the load_policy tool
_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

talk is cheap. supply exceeds demand

[Lawless]

Ok load_policy is going into "/etc/selinux/strict/policy/" which is empty and therefore I get an

[nixnut]

less /var/db/pkg/sec-policy/selinux-base-policy-20061015/CONTENTS should tell you where the policy files got installed.
_________________
Please add [solved] to the initial post's subject line if you feel your problem is resolved. Help answer the unanswered

talk is cheap. supply exceeds demand

[Lawless]

Ok next try...

[Lawless]

And now I cannot emerge other packages

[Lawless]

Ok, now I got the refpolicy sources which are getting downloaded with the selinux-base-policy but don't get installed to /etc/selinux...
I did this myself, compiled the policy and loaded it successfully

[b_koepke]

Did you keep reading the SELinux handbook?
It says that as of 2006.1 you use the tool 'semodule -B' to load selinux policies.
http://www.gentoo.org/proj/en/hardened/selinux/selinux-handbook.xml?part=3&chap=2
The 'make load' command is depreciated.
(I had the same problem until I read the rest of the handbook)

[Lawless]

I did try it but with the semodule tool I only get

[b_koepke]

make sure the file '/etc/selinux/semanage.conf' is set to direct and not to source. (module-store = direct)
also you need to use the standard ebuilds.

[Lawless]

[b_koepke]

hmm... this sounds like a pretty complicated error.
I had one similar; however, I cannot remember what I did to fix it.
It may have to do with the fact that you are currently using sources to load your policies. (you ran 'make load' in the /etc/selinux/policy/src directory, so now the semodule tool sees that you have already loaded the policy from different sources)
Your sestatus output displays that the config is from refpolicy. I don't know how to reset this. (maybe it is in the options in /etc/selinux/policy/src?, you could try running 'make clean' or something similar to unload the selinux policy)
I don't know what to suggest other than to remove the selinux use flag, emerge -uDN world, reboot and add the selinux use flag again, and run emerge -uDN world. (Hoping that you did some small thing wrong during the previous installation).
Then instead of running make load, just try semodule -B, this problem may also be because your files have not been labeled yet. rlpkg -a. (I will try to figure something better out later if this doesn't work)

[Lawless]

This semodule error comes also when I have no policy loaded (sestatus: disabled)...

I set up a UML where I currently try it again with a plain system. I'll tell you what happens.
_________________
Kernel panic: I have no root and I want to scream

[flipper203]

Hello,
I have the same kind of problem: https://forums.gentoo.org/viewtopic-t-512934.html maybe someone can help me.

[Lawless]

Got it working in the UML

I had to: