embedded linux - how to add libselinux into the openwrt build system? -
i building openwrt system selinux support. first meet bug cannot find , during busybox compiling. , know there libselinux library needed build busybox selinux support. not familiar openwrt makefile, want know how add library in it? there guide? further more, have find code in selinux github( https://github.com/selinuxproject/selinux) different code have find in local linux source in openwrt ("/linux/security/selinux/*"). why? know selinux supported in linux2.6. seems still have port selinux linux self?
this problem has blocked me long time. soft of appreciated, thanks!
i know selinux on debian, since mix different things, answer "why?" part:
- the linux-kernel offers interface via linux security modules (lsm) selinux , other security modules (that see in "local linux source").
- to manage selinux , policies there userland tools (that github link).
- selinux policies compiled .pp files consist of .te/if/fc files , there ready-to-use rules called selinux reference policy project.
- there more tools needed work selinux
fixfiles
,restorecon
set needed labels.
to check if selinux enabled try command id -z
if see error message, lsm selinux not active. guess possible activate openwrt, because part of busybox/config/selinux, try command sestatus
see if enabled.
on debian 1 can touch /.autorelabel
, reboot force relabeling system.
Comments
Post a Comment