]>
Commit | Line | Data |
---|---|---|
8e0ef1f9 CP |
1 | ######################################## |
2 | # | |
3 | # Policy build options | |
4 | # | |
5 | ||
6 | # Policy version | |
7 | # By default, checkpolicy will create the highest | |
8 | # version policy it supports. Setting this will | |
9 | # override the version. This only has an | |
10 | # effect for monolithic policies. | |
11 | #OUTPUT_POLICY = 18 | |
12 | ||
13 | # Policy Type | |
350b6ab7 CP |
14 | # standard, mls, mcs |
15 | TYPE = standard | |
8e0ef1f9 CP |
16 | |
17 | # Policy Name | |
18 | # If set, this will be used as the policy | |
19 | # name. Otherwise the policy type will be | |
20 | # used for the name. | |
21 | NAME = refpolicy | |
22 | ||
23 | # Distribution | |
24 | # Some distributions have portions of policy | |
25 | # for programs or configurations specific to the | |
26 | # distribution. Setting this will enable options | |
27 | # for the distribution. | |
2f1a8fbc | 28 | # redhat, gentoo, debian, suse, and rhel4 are current options. |
8e0ef1f9 | 29 | # Fedora users should enable redhat. |
cb1d1e9a | 30 | #DISTRO = redhat |
8e0ef1f9 | 31 | |
8acfcbcc CP |
32 | # Unknown Permissions Handling |
33 | # The behavior for handling permissions defined in the | |
34 | # kernel but missing from the policy. The permissions | |
35 | # can either be allowed, denied, or the policy loading | |
36 | # can be rejected. | |
37 | # allow, deny, and reject are current options. | |
38 | #UNK_PERMS = deny | |
39 | ||
8e0ef1f9 CP |
40 | # Direct admin init |
41 | # Setting this will allow sysadm to directly | |
42 | # run init scripts, instead of requring run_init. | |
43 | # This is a build option, as role transitions do | |
44 | # not work in conditional policy. | |
6a37eba8 | 45 | DIRECT_INITRC = n |
8e0ef1f9 | 46 | |
dd6d81a0 SS |
47 | # Build monolithic policy. Putting y here |
48 | # will build a monolithic policy. | |
49 | MONOLITHIC = n | |
8e0ef1f9 | 50 | |
296273a7 CP |
51 | # User-based access control (UBAC) |
52 | # Enable UBAC for role separations. | |
53 | UBAC = y | |
54 | ||
db774a54 CP |
55 | # Custom build options. This field enables custom |
56 | # build options. Putting foo here will enable | |
57 | # build option blocks named foo. Options should be | |
58 | # separated by spaces. | |
59 | CUSTOM_BUILDOPT = | |
60 | ||
e070dd2d CP |
61 | # Number of MLS Sensitivities |
62 | # The sensitivities will be s0 to s(MLS_SENS-1). | |
63 | # Dominance will be in increasing numerical order | |
64 | # with s0 being lowest. | |
6a37eba8 | 65 | MLS_SENS = 16 |
e070dd2d CP |
66 | |
67 | # Number of MLS Categories | |
68 | # The categories will be c0 to c(MLS_CATS-1). | |
0001e26f | 69 | MLS_CATS = 1024 |
e070dd2d CP |
70 | |
71 | # Number of MCS Categories | |
72 | # The categories will be c0 to c(MLS_CATS-1). | |
0001e26f | 73 | MCS_CATS = 1024 |
e070dd2d | 74 | |
9b3756bf CP |
75 | # Set this to y to only display status messages |
76 | # during build. | |
6a37eba8 | 77 | QUIET = n |