scripts/selinux/install_policy.sh

2 # SPDX-License-Identifier: GPL-2.0
3 set -e
4 if [ `id -u` -ne 0 ]; then
5 	echo "$0: must be root to install the selinux policy"
10 if [ $? -eq 1 ]; then
17 if [ $? -eq 1 ]; then
22 VERS=`$CP -V | awk '{print $1}'`
25 if [ $? -eq 1 ]; then
27 	echo "Do you have libselinux-utils installed?"
34     echo "Boot with selinux=0 on the kernel command-line."
39 ./mdp -m policy.conf file_contexts
40 $CP -U allow -M -o policy.$VERS policy.conf
42 mkdir -p /etc/selinux/dummy/policy
43 mkdir -p /etc/selinux/dummy/contexts/files
60 cp policy.$VERS /etc/selinux/dummy/policy
63 if [ ! -d /etc/selinux ]; then
64 	mkdir -p /etc/selinux
66 if [ -f /etc/selinux/config ]; then
70 echo "Creating new /etc/selinux/config for dummy policy."
77 $SF -F file_contexts /
80 	grep -E "ext[234]|jfs|xfs|reiserfs|jffs2|gfs2|btrfs|f2fs|ocfs2" | \
82 $SF -F file_contexts $mounts
84 echo "-F" > /.autorelabel