Build and tested for EL9 using shibboleth-3.4.1-1.x86_64 and httpd-2.4.57-5.el9.x86_64.
Requires policycoreutils-devel
$ sudo dnf -y install policycoreutils-devel
Initial skeleton generated on AlmaLinux 9.3 with
$ sepolicy generate --init /sbin/shibd
To build policy module:
$ make -f /usr/share/selinux/devel/Makefile shibd.pp
To install module:
$ sudo semodule -i shibd.pp
$ sudo restorecon -Rv /usr/sbin/shibd /etc/shibboleth /var/log/shibboleth /var/cache/shibboleth /var/run/shibboleth
$ sudo systemctl restart httpd shibd
Check for AVCs with
$ sudo ausearch -m avc
It should show nothing related to shibd.
To build RPM with shibd.sh:
$ sudo dnf -y install rpm-build
$ pwd=$(pwd)
$ rpmbuild --define "_sourcedir ${pwd}" --define "_specdir ${pwd}" --define "_builddir ${pwd}" --define "_srcrpmdir ${pwd}" --define "_rpmdir ${pwd}" --define "_buildrootdir ${pwd}/.build" -ba shibd_selinux.spec
To do everything, i.e. build shibd pp module, install it and build rpms:
$ sudo sh ./shibd.sh
It should work on EL8 as well, but it's completely untested and maybe missing some pieces.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent