Creating SELinux Context Type in RHEL5
Our environment is running RHEL 5 and there are still a handful of servers with SELinux set to permissive mode. I've been going through the audit logs and generating policy entries as needed, but I have run into a situation where the context type I need does not exist.
In order to determine what policies to generate, I've been comparing some of the AVC denial messages on my RHEL 5 boxes with some of the newer policies (CentOS 6.3 and Fedora 17) to find out if there are any entries to address the denials I'm getting. In many cases, the denials I'm getting are set to "dontaudit" in newer OS versions.
What I'm running up against now is the fact that we have VMWare Tools on a few servers and that is getting flagged. When I look at my CentOS system, there are several file contexts for VMWare-related files. In the RHEL 5 policies, however, these contexts do not exist, so I can't create file contexts using 'semanage' because the 'type' is not recognized.
How do I create a 'type' so that I can assign that type to a group of files on my server? I haven't been able to find much about this, so I thought I'd try posting something here.
Thanks in advance for any suggestions!
Responses