semodule -i *.pp
libsepol.permission_copy_callback: Module my_logrotate depends on
permission kill in class service, not satisfied (No such file or
directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or
directory).
If we try semodule -r my_logrotate it fails to remove with the same
complaint about my_fail2ban which is the one we were trying to reinstall
as it seems to not be functioning as we see the following avc which we
allow in the policy. This is on a system we did a fedup from Fedora 21.
time->Mon Jun 15 01:10:47 2015
type=AVC msg=audit(1434355847.063:29227): avc: denied { net_admin }
for pid=12476 comm="firewall-cmd" capability=12
scontext=system_u:system_r:fail2ban_t:s0
tcontext=system_u:system_r:fail2ban_t:s0 tclass=capability permissive=0
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
