Re: [gentoo-user] SELinux policy problem
On Thursday, 24 September 2020 19:06:11 BST Dan Egli wrote: > On 9/23/2020 11:36 PM, Dan Egli wrote: > > Maybe I just need a day or two off, but I'm having an issue and the > > Wiki page doesn't seem to help me. > > > > > > I'm installing a new system. It's the same one I was having Grub > > issues on. Now that those issues are resolved, I am adding the extra > > packages on the list. One (or several really) of those packages is > > SELinux and it's policies. I've found all the policies I want to add, > > but when I emerge them I ALWAYS get an error about not being able to > > resolve typesetattribute. For example, from the policy for clamav: > > > > > > With the exception of the base-policy package, EVERY SELinux policy > > said that. I've looked and what I see online doesn't seem to make > > sense to me. Then again, I AM brand new to SELinux. Anyone got any > > tips as to making sure they emerge okay? > > Odd, I just noticed the line didn't appear. Let's try this again. Here's > the message I get from selinux-clamav: > > > Failed to resolve typeattributeset statement at > /var/lib/selinux/targeted/tmp/modules/400/clamav/cil:41 > > > Anyone got tips on this? I haven't implemented selinux for some years now to be able to advise. Did you have a look at this post in case it gives you a pointer? https://forums.gentoo.org/viewtopic-t-1036790-start-0.html Also see this part of the wiki for creating an empty policy module if you need to: https://wiki.gentoo.org/wiki/SELinux/FAQ#How_to_I_load_an_entire_policy_set.3F signature.asc Description: This is a digitally signed message part.
Re: [gentoo-user] SELinux policy problem
On 9/23/2020 11:36 PM, Dan Egli wrote: Maybe I just need a day or two off, but I'm having an issue and the Wiki page doesn't seem to help me. I'm installing a new system. It's the same one I was having Grub issues on. Now that those issues are resolved, I am adding the extra packages on the list. One (or several really) of those packages is SELinux and it's policies. I've found all the policies I want to add, but when I emerge them I ALWAYS get an error about not being able to resolve typesetattribute. For example, from the policy for clamav: With the exception of the base-policy package, EVERY SELinux policy said that. I've looked and what I see online doesn't seem to make sense to me. Then again, I AM brand new to SELinux. Anyone got any tips as to making sure they emerge okay? Odd, I just noticed the line didn't appear. Let's try this again. Here's the message I get from selinux-clamav: Failed to resolve typeattributeset statement at /var/lib/selinux/targeted/tmp/modules/400/clamav/cil:41 Anyone got tips on this?
Re: [gentoo-user] SELinux policy problem
No one has any ideas? I was hoping SOMEONE could help within 12 hours On 9/23/2020 11:36 PM, Dan Egli wrote: Maybe I just need a day or two off, but I'm having an issue and the Wiki page doesn't seem to help me. I'm installing a new system. It's the same one I was having Grub issues on. Now that those issues are resolved, I am adding the extra packages on the list. One (or several really) of those packages is SELinux and it's policies. I've found all the policies I want to add, but when I emerge them I ALWAYS get an error about not being able to resolve typesetattribute. For example, from the policy for clamav: With the exception of the base-policy package, EVERY SELinux policy said that. I've looked and what I see online doesn't seem to make sense to me. Then again, I AM brand new to SELinux. Anyone got any tips as to making sure they emerge okay?
[gentoo-user] SELinux policy problem
Maybe I just need a day or two off, but I'm having an issue and the Wiki page doesn't seem to help me. I'm installing a new system. It's the same one I was having Grub issues on. Now that those issues are resolved, I am adding the extra packages on the list. One (or several really) of those packages is SELinux and it's policies. I've found all the policies I want to add, but when I emerge them I ALWAYS get an error about not being able to resolve typesetattribute. For example, from the policy for clamav: With the exception of the base-policy package, EVERY SELinux policy said that. I've looked and what I see online doesn't seem to make sense to me. Then again, I AM brand new to SELinux. Anyone got any tips as to making sure they emerge okay?
