Your message dated Fri, 08 Sep 2006 00:17:08 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#384502: fixed in refpolicy 0.0.20060907-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: selinux-policy-refpolicy-src
Version: 0.0.20060813-2

When trying to compile a modular targeted policy (using make load), the
build fails with the following error:

/etc/selinux/refpolicy/contexts/files/file_contexts: Multiple different
specifications for /usr/bin/mplayer 
(system_u:object_r:unconfined_execmem_exec_t and 
system_u:object_r:mplayer_exec_t)

This happens because the file context for /usr/bin/mplayer is defined in
/etc/selinux/refpolicy/src/policy/policy/modules/apps/mplayer.fc to make it
run within the mplayer_exec_t domain.  In the case of a targeted policy,
however, /etc/selinux/refpolicy/src/policy/policy/modules/system/unconfined.fc
tries to make it run within the unconfined_execmem_exec_t domain.

The problem is fixed by moving the line for /usr/bin/mplayer in mplayer.fc
so it lies within the ifdef, thus preventing it being compiled into targeted
policies.

Regards

sr

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)

Versions of packages selinux-policy-refpolicy-src depends on:
ii  checkpolicy               1.30.10-2      SELinux policy compiler
ii  gawk                      1:3.1.5.dfsg-4 GNU awk, a pattern scanning
ii  policycoreutils           1.30.26-3      SELinux core policy utilities
ii  python                    2.4.3-11       An interactive high-level

Versions of packages selinux-policy-refpolicy-src recommends:
ii  setools                       2.4-1      Tresys tools for managing SE
                                                                  


--- End Message ---
--- Begin Message ---
Source: refpolicy
Source-Version: 0.0.20060907-1

We believe that the bug you reported is fixed in the latest version of
refpolicy, which is due to be installed in the Debian FTP archive:

refpolicy_0.0.20060907-1.diff.gz
  to pool/main/r/refpolicy/refpolicy_0.0.20060907-1.diff.gz
refpolicy_0.0.20060907-1.dsc
  to pool/main/r/refpolicy/refpolicy_0.0.20060907-1.dsc
refpolicy_0.0.20060907.orig.tar.gz
  to pool/main/r/refpolicy/refpolicy_0.0.20060907.orig.tar.gz
selinux-policy-refpolicy-doc_0.0.20060907-1_all.deb
  to pool/main/r/refpolicy/selinux-policy-refpolicy-doc_0.0.20060907-1_all.deb
selinux-policy-refpolicy-src_0.0.20060907-1_all.deb
  to pool/main/r/refpolicy/selinux-policy-refpolicy-src_0.0.20060907-1_all.deb
selinux-policy-refpolicy-strict_0.0.20060907-1_all.deb
  to 
pool/main/r/refpolicy/selinux-policy-refpolicy-strict_0.0.20060907-1_all.deb
selinux-policy-refpolicy-targeted_0.0.20060907-1_all.deb
  to 
pool/main/r/refpolicy/selinux-policy-refpolicy-targeted_0.0.20060907-1_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Manoj Srivastava <[EMAIL PROTECTED]> (supplier of updated refpolicy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri,  8 Sep 2006 00:27:39 -0500
Source: refpolicy
Binary: selinux-policy-refpolicy-src selinux-policy-refpolicy-targeted 
selinux-policy-refpolicy-strict selinux-policy-refpolicy-doc
Architecture: source all
Version: 0.0.20060907-1
Distribution: unstable
Urgency: low
Maintainer: Manoj Srivastava <[EMAIL PROTECTED]>
Changed-By: Manoj Srivastava <[EMAIL PROTECTED]>
Description: 
 selinux-policy-refpolicy-doc - Documentation for the SELinux reference policy
 selinux-policy-refpolicy-src - Source of the SELinux reference policy for 
customization
 selinux-policy-refpolicy-strict - Strict variant of the SELinux reference 
policy
 selinux-policy-refpolicy-targeted - Targeted variant of the SELinux reference 
policy
Closes: 384502 384850
Changes: 
 refpolicy (0.0.20060907-1) unstable; urgency=low
 .
   * New upstream SCM HEAD.
   * Bug fix: "selinux-policy-refpolicy-src: Compile failure of modular
     targeted policy", thanks to Simon Richard Grint. Put a wrapper around
     the offending lines to only take effect when running a strict policy.
                                                             (Closes: #384502).
   * Bug fix: "make: /usr/sbin/setfiles: Command not found", thanks to Uwe
     Hermann. Fixed upstream.                                (Closes: #384850).
Files: 
 e30233e3d04a04699aaad07f3a53072a 820 admin optional 
refpolicy_0.0.20060907-1.dsc
 183f5d1a3533b116ff23d7496ab6f3de 429989 admin optional 
refpolicy_0.0.20060907.orig.tar.gz
 c54c5c98b3109dbe57d38d39cf2da00b 143958 admin optional 
refpolicy_0.0.20060907-1.diff.gz
 64b62dc148901e3213aeabbf7fac1438 1489026 admin optional 
selinux-policy-refpolicy-strict_0.0.20060907-1_all.deb
 1afb9435855b4806dca9a9d75050352a 1218934 admin optional 
selinux-policy-refpolicy-targeted_0.0.20060907-1_all.deb
 51a3b5795eb11b4111c054ebde5bfa4b 546172 admin optional 
selinux-policy-refpolicy-src_0.0.20060907-1_all.deb
 ca1dd0167ce4e172a1751bd62a8aeedb 308244 doc optional 
selinux-policy-refpolicy-doc_0.0.20060907-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFARSKIbrau78kQkwRAgIMAKDVPqlw7sNKHgsiteXntvt/Mr2Z0ACfWDjO
Evjpibs0O8zLKY4ub3/QD2o=
=dWwm
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to