Problem after upgrading to Fedora 10

[Konrad Azzopardi]

Dear all,

I made an upgrade from Fedora 9 to Fedora 10 using preupgrade. My
modules were working fine until I decided to recompile them in Fedora
10. So basically the same .pp files generated in Fedora 9 work.

when I recompile them I get the following error :

[root@MALTA YULE]#  make -f /usr/share/selinux/devel/Makefile
yule.if:14: Error: duplicate definition of yule_domtrans(). Original
definition on 14.
yule.if:34: Error: duplicate definition of yule_script_domtrans().
Original definition on 34.
yule.if:64: Error: duplicate definition of yule_admin(). Original
definition on 64.
yule.if:95: Error: duplicate definition of yule_stream_connect().
Original definition on 95.
Compiling targeted yule module
/usr/bin/checkmodule:  loading policy configuration from tmp/yule.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 8) to tmp/yule.mod
Creating targeted yule.pp policy package
rm tmp/yule.mod.fc tmp/yule.mod


and when I try to insert module

[root@MALTA YULE]# semodule -i yule.pp
libsepol.permission_copy_callback: Module yule depends on permission
nlmsg_tty_audit in class netlink_audit_socket, not satisfied
libsemanage.semanage_link_sandbox: Link packages failed
semodule:  Failed!

I have same problem wiith another module which makes believe I have
something wrong in the system. i am using the last FC10 policy :

[root@MALTA YULE]# rpm -aq | grep selinux-policy
selinux-policy-3.5.13-41.fc10.noarch
selinux-policy-doc-3.5.13-41.fc10.noarch
selinux-policy-targeted-3.5.13-41.fc10.noarch

anyhelp would be appreciated. Attached pls find my files for reference.

Thanks
Konrad

[Konrad Azzopardi]

To add something to my statement....I also have a virtual machine that
i installed with preupgrade from F9 to F10 and there is no such
problem. The only difference is that while upgrading this machine the
modules where not loaded in the system.

On Mon, Feb 2, 2009 at 10:36 PM, Konrad Azzopardi
<konrad.azzopardi(a)gmail.com&gt; wrote:
>  Dear all,
>
>  I made an upgrade from Fedora 9 to Fedora 10 using preupgrade. My
>  modules were working fine until I decided to recompile them in Fedora
>  10. So basically the same .pp files generated in Fedora 9 work.
>
>  when I recompile them I get the following error :
>
>  [root@MALTA YULE]#  make -f /usr/share/selinux/devel/Makefile
>  yule.if:14: Error: duplicate definition of yule_domtrans(). Original
>  definition on 14.
>  yule.if:34: Error: duplicate definition of yule_script_domtrans().
>  Original definition on 34.
>  yule.if:64: Error: duplicate definition of yule_admin(). Original
>  definition on 64.
>  yule.if:95: Error: duplicate definition of yule_stream_connect().
>  Original definition on 95.
>  Compiling targeted yule module
>  /usr/bin/checkmodule:  loading policy configuration from tmp/yule.tmp
>  /usr/bin/checkmodule:  policy configuration loaded
>  /usr/bin/checkmodule:  writing binary representation (version 8) to tmp/yule.mod
>  Creating targeted yule.pp policy package
>  rm tmp/yule.mod.fc tmp/yule.mod
>
>
>  and when I try to insert module
>
>  [root@MALTA YULE]# semodule -i yule.pp
>  libsepol.permission_copy_callback: Module yule depends on permission
>  nlmsg_tty_audit in class netlink_audit_socket, not satisfied
>  libsemanage.semanage_link_sandbox: Link packages failed
>  semodule:  Failed!
>
>  I have same problem wiith another module which makes believe I have
>  something wrong in the system. i am using the last FC10 policy :
>
>  [root@MALTA YULE]# rpm -aq | grep selinux-policy
>  selinux-policy-3.5.13-41.fc10.noarch
>  selinux-policy-doc-3.5.13-41.fc10.noarch
>  selinux-policy-targeted-3.5.13-41.fc10.noarch
>
>  anyhelp would be appreciated. Attached pls find my files for reference.
>
>  Thanks
>  Konrad
>

[Stephen Smalley]

On Mon, 2009-02-02 at 22:36 +0100, Konrad Azzopardi wrote:
>  Dear all,
>  
>  I made an upgrade from Fedora 9 to Fedora 10 using preupgrade. My
>  modules were working fine until I decided to recompile them in Fedora
>  10. So basically the same .pp files generated in Fedora 9 work.
>  
>  when I recompile them I get the following error :
>  
>  [root@MALTA YULE]#  make -f /usr/share/selinux/devel/Makefile
>  yule.if:14: Error: duplicate definition of yule_domtrans(). Original
>  definition on 14.
>  yule.if:34: Error: duplicate definition of yule_script_domtrans().
>  Original definition on 34.
>  yule.if:64: Error: duplicate definition of yule_admin(). Original
>  definition on 64.
>  yule.if:95: Error: duplicate definition of yule_stream_connect().
>  Original definition on 95.
>  Compiling targeted yule module
>  /usr/bin/checkmodule:  loading policy configuration from tmp/yule.tmp
>  /usr/bin/checkmodule:  policy configuration loaded
>  /usr/bin/checkmodule:  writing binary representation (version 8) to tmp/yule.mod
>  Creating targeted yule.pp policy package
>  rm tmp/yule.mod.fc tmp/yule.mod
>  
>  
>  and when I try to insert module
>  
>  [root@MALTA YULE]# semodule -i yule.pp
>  libsepol.permission_copy_callback: Module yule depends on permission
>  nlmsg_tty_audit in class netlink_audit_socket, not satisfied
>  libsemanage.semanage_link_sandbox: Link packages failed
>  semodule:  Failed!
>  
>  I have same problem wiith another module which makes believe I have
>  something wrong in the system. i am using the last FC10 policy :
>  
>  [root@MALTA YULE]# rpm -aq | grep selinux-policy
>  selinux-policy-3.5.13-41.fc10.noarch
>  selinux-policy-doc-3.5.13-41.fc10.noarch
>  selinux-policy-targeted-3.5.13-41.fc10.noarch
>  
>  anyhelp would be appreciated. Attached pls find my files for reference. 
Does the problem persist even after:
make -f /usr/share/selinux/devel/Makefile clean

What does 'rpm -V selinux-policy' show?

-- 
Stephen Smalley
National Security Agency

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Konrad Azzopardi wrote:
>  Dear all,
>  
>  I made an upgrade from Fedora 9 to Fedora 10 using preupgrade. My
>  modules were working fine until I decided to recompile them in Fedora
>  10. So basically the same .pp files generated in Fedora 9 work.
>  
>  when I recompile them I get the following error :
>  
>  [root@MALTA YULE]#  make -f /usr/share/selinux/devel/Makefile
>  yule.if:14: Error: duplicate definition of yule_domtrans(). Original
>  definition on 14.
>  yule.if:34: Error: duplicate definition of yule_script_domtrans().
>  Original definition on 34.
>  yule.if:64: Error: duplicate definition of yule_admin(). Original
>  definition on 64.
>  yule.if:95: Error: duplicate definition of yule_stream_connect().
>  Original definition on 95.
>  Compiling targeted yule module
>  /usr/bin/checkmodule:  loading policy configuration from tmp/yule.tmp
>  /usr/bin/checkmodule:  policy configuration loaded
>  /usr/bin/checkmodule:  writing binary representation (version 8) to tmp/yule.mod
>  Creating targeted yule.pp policy package
>  rm tmp/yule.mod.fc tmp/yule.mod
>   
This happens when you have a yule.if in both the local directory and in
/usr/share/selinux/devel/include/...


>  
>  and when I try to insert module
>  
>  [root@MALTA YULE]# semodule -i yule.pp
>  libsepol.permission_copy_callback: Module yule depends on permission
>  nlmsg_tty_audit in class netlink_audit_socket, not satisfied
>  libsemanage.semanage_link_sandbox: Link packages failed
>  semodule:  Failed!
>   
This looks like you are installing into a non F10 policy.


>  I have same problem wiith another module which makes believe I have
>  something wrong in the system. i am using the last FC10 policy :
>  
>  [root@MALTA YULE]# rpm -aq | grep selinux-policy
>  selinux-policy-3.5.13-41.fc10.noarch
>  selinux-policy-doc-3.5.13-41.fc10.noarch
>  selinux-policy-targeted-3.5.13-41.fc10.noarch
>  
>  anyhelp would be appreciated. Attached pls find my files for reference.
>  
>  Thanks
>  Konrad
>  
>  
>  ------------------------------------------------------------------------
>  
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-selinux-list 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkmIyvoACgkQrlYvE4MpobO4TACfeSkEy/bjQCiaUixQv0N2vEht
> INsAoLzrYHz3nfyJl3ABUsPYxzDiq2kt
> =00sl
> -----END PGP SIGNATURE-----