I have this rule in my policy:  gen_require(`                type staff_java_t;                type cdvoip_sysadmcat_pki_cdvaserver_pem_t; ') allow staff_java_t cdvoip_sysadmcat_pki_cdvaserver_pem_t: file { read open };   and get error 'type staff_java_t is not within scope'  when compile it.   policy/modules/cdvoip/cdvoip_sysadmcat.te":306:ERROR 'type staff_java_t is not within scope' at token ';' on line 1684769: /usr/bin/checkpolicy: loading policy configuration from policy.conf allow staff_java_t cdvoip_sysadmcat_pki_cdvaserver_pem_t: file { read open };  checkpolicy: error(s) encountered while parsing configuration make: *** [/home/cdvadmin/workspace/cdvoip/rpms/BUILDROOT/selinux-policy-3.7.19-155el6.4.x86_64/etc/selinux/targeted/policy/policy.24] Error 1   Does anyone know why I get this error and how to fix it? BTW, if it does matter, I modified the *.spec file to build a monolithic and strict policy.  Many thanks, Hung Truong  |
