#!/bin/sh # MANAGED WITH CHEF; DO NOT CHANGE BY HAND set -e if [ $# -ne 1 ]; then echo "usage: $0 MODULE.te" exit 1 fi selinux_status=$(sestatus | sed -e '/^SELinux status:/ !d; s/.*\s//') if ! selinux-enabled; then echo "I: SELinux disabled, skipping" exit 0 fi input="$1" directory=$(dirname "$input") cd $directory module=$(basename --suffix=.te "$input") rm -f ${module}.mod ${module}.pp checkmodule -M -m -o ${module}.mod ${module}.te semodule_package -o ${module}.pp -m ${module}.mod semodule -i ${module}.pp