Hi, I was updating a policy because I had to add some permissions.
So, I added number in .te file and successfully upgraded mypolicy.
semodule -u mypolicy.pp
5 minutes later, I found another permission should have been added to mypolicy.pp so I added it and .te number remains the same.
Yes, I should have added permissions at one time and make no haste.
But, isn't it convenient to add --force option to semodule ?
Now, if the number is the same, I get this error.
[root@localhost xx]# semodule -u mypolicy.pp libsemanage.get_direct_upgrade_filename: Previous module mypolicy is same or newer. (No such file or directory).