Re: SELinux policy for both Enterprise Linux 5 and 6

Miroslav Grepl <mgrepl@xxxxxxxxxx> · Thu, 01 Dec 2011 12:03:26 +0100



    On 11/18/2011 02:05 AM, Brian Ginn wrote:
    
      
        I have SELinux policy that is compiled on
          Red Hat Enterprise Linux 5.
        This policy fails to install on Red Hat
          Enterprise Linux 6 with the following message:
        libsepol.print_missing_requirements:
          pbrun's global requirements were not met: type/attribute
          system_chkpwd_t (No such file or directory).
      
    
    This type does not exist on RHEL6. This is a problem why you can not
    load your local policy. You probably just need to recompile your
    policy on RHEL6. Another option would be to use "optional_policy"
    block for interface calling.

    
    For example

    
    optional_policy(`

     auth_domtrans_chk_passwd(test_t)

    ')

    
    If something is wrong with this interface then it won't be used. But
    of course, then you will lost a part of functionality.

    
        Is there a way to write SELinux policy so
          that It can be compiled on v 5.x and will run on 6.x ?
      
    
        Thanks,
        Brian
      
    
    Regards,

    Miroslav

    
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
    
    
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux