Re: audit2allow: invalid binary policy

[leo kirotawa <kirotawa@xxxxxxxxx>]

It works for me,
thank you for your quick response.

On Thu, Feb 6, 2014 at 7:12 AM, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/05/2014 07:07 PM, leo kirotawa wrote:
> Hi,
>
> I'm having issues when use audit2allow in a Z machine with Fedora 19. This
> is the output message it raises:
>
> audit2allow -a security: ebitmap: map size 1064 does not match my size 64
> (high bit was 595) invalid binary policy
>

audit2allow is trying to read policy from the kernel, their might be a bug there.

try audit2allow -a -p /etc/selinux/policy/policy.$VERSION

>
> As a solution I thought in recompile my whole policy and generate a new
> /policy/binary, but this time I grabbed a ERROR: (serefpolicy-3.12.1)
>
> /usr/bin/checkmodule base.conf -o tmp/base.mod /usr/bin/checkmodule:
> loading policy configuration from base.conf
> policy/modules/kernel/domain.te":256:ERROR 'unknown type tape_device_t used
> in transition definition' at token ';' on line 22729: #line 256
> type_transition unconfined_domain_type device_t:chr_file tape_device_t
> "ht00"; /usr/bin/checkmodule:  error(s) encountered while parsing
> configuration make: *** [tmp/base.mod] Error 1
>
> Looking in my /dev/ I did not find any 'ht00' device, what makes me
> suppose maybe it is the problem. Also looking in .te files I saw
> tape_device_t is defined into storage.te, and in this point I have no idea
> what is cause of this problem or how to fix it.
>
> Have you ever seen it before?
>
>
>
>
>
>
>

> _______________________________________________ Selinux mailing list
> Selinux@xxxxxxxxxxxxx To unsubscribe, send email to
> Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help"
> to Selinux-request@xxxxxxxxxxxxx.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlLzUfMACgkQrlYvE4MpobOkOACeNXUaLcyJ8V4jPMcGU3rNh/aO
F0MAoMkeafrYMdf17yvWv/ZUlb3GygyG
=x/gR
-----END PGP SIGNATURE-----

--

----------------------------------------------

Leônidas S. Barbosa (Kirotawa)

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.