quine-global-labs/mirror-cockpit-project-cockpit
1
0
Fork 0
mirror of https://github.com/cockpit-project/cockpit.git synced 2026-11-03 21:49:50 -09:00
Code Issues Projects Releases Packages Wiki Activity
mirror-cockpit-project-cockpit/selinux/HACKING.md
Martin Pitt 02051cfa0a selinux: Document how to quickly iterate policy changes 
Knowing what to change in the policy is often not quite obvious, and
takes several attempts. Show how to do this much more quickly than
repeated rpm/image builds.
2023-09-29 17:06:44 +02:00

432 B
Raw Permalink Blame History

Changing cockpit's SELinux policy

The clean way is to edit the policy files and then rebuild the rpms and image with test/image-prepare -q fedora-XX.

To iterate more quickly, locally ./configure the build tree with --enable-selinux-policy=targeted, then you can quickly recompile and install the policy into the c SSH target with:

make cockpit.pp && scp cockpit.pp c:/tmp/ && ssh c semodule -i /tmp/cockpit.pp