Arch Linux

IrvineHimself

Member

From: Scotland

Registered: 2016-08-21

Posts: 275

SELinux: requiredmod.te, where does it go?

I am following the Wiki to install SELinux  and am unsure as to where to create the file requiredmod.te. Presumably, from the context, it should go in /etc/selinux/ Could someone please confirm this?

Further, noting that the purpose of the file is to

....remove a few messages from /var/log/audit/audit.log which are a nuisance to deal with in the reference policy...

Since that particular section of the Wiki deals with the AUR's selinux-refpolicy-src, which installs the un-patched reference policy downloaded directly from upstream, do I need this file if I have installed the patched selinux-refpolicy-arch and have SELINUXTYPE=refpolicy-arch in /etc/selinux/config?

Thanks for your thoughts
Irvine

---

Et voilà, elle arrive. La pièce, le sous, peut-être qu'il arrive avec vous!

jasper1378

Member

Registered: 2022-01-27

Posts: 3

Re: SELinux: requiredmod.te, where does it go?

You ever figure this out? I've got the exact same two questions

IrvineHimself

Member

From: Scotland

Registered: 2016-08-21

Posts: 275

Re: SELinux: requiredmod.te, where does it go?

Not that I can recall. For a number of reasons, not just this one, I used 'Fedora' to explore 'SELinux', now that I have returned to 'Arch' I am using 'AppArmor' with 'Firejail'.

---

Et voilà, elle arrive. La pièce, le sous, peut-être qu'il arrive avec vous!

jasper1378

Member

Registered: 2022-01-27

Posts: 3

Re: SELinux: requiredmod.te, where does it go?

Thanks for the quick reply on an old post!

6rJ27GKfu

Member

Registered: 2020-06-17

Posts: 13

Re: SELinux: requiredmod.te, where does it go?

I guess it doesn't matter, since you simply use the file as a set of rules to then check and set modules. It's not a config file you actually place in a directory.
This is why there's is no directory mentioned in the wiki, but the creation of the file is followed by those commands which obviously can be run in and directory:

# checkmodule -m -o requiredmod.mod requiredmod.te
# semodule_package -o requiredmod.pp -m requiredmod.mod
# semodule -i requiredmod.pp