-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/01/2011 06:03 AM, Miroslav Grepl wrote: > On 11/18/2011 02:05 AM, Brian Ginn wrote: >> >> I have SELinux policy that is compiled on Red Hat Enterprise >> Linux 5. >> >> This policy fails to install on Red Hat Enterprise Linux 6 with >> the following message: >> >> libsepol.print_missing_requirements: pbrun's global requirements >> were not met: type/attribute system_chkpwd_t (No such file or >> directory). >> > This type does not exist on RHEL6. This is a problem why you can > not load your local policy. You probably just need to recompile > your policy on RHEL6. Another option would be to use > "optional_policy" block for interface calling. > > For example > > optional_policy(` auth_domtrans_chk_passwd(test_t) ') > > If something is wrong with this interface then it won't be used. > But of course, then you will lost a part of functionality. >> >> >> >> Is there a way to write SELinux policy so that It can be compiled >> on v 5.x and will run on 6.x ? >> > >> >> >> >> >> >> >> Thanks, >> >> Brian >> > Regards, Miroslav >> >> >> -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx >> https://admin.fedoraproject.org/mailman/listinfo/selinux > > > > -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/selinux Miroslav we need to add the type alias for this situation, though. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk7XjAUACgkQrlYvE4MpobPjCwCgl5KGLHffnscGuAbg8r8ud/td xXsAni/3l1Qy/ud5MtZj7tEKQEWfJSuV =Trss -----END PGP SIGNATURE----- -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
