semodule error/question

[Leffler, Sean]

The Setup: 
In VMware (winders based) I created a FC5 barebones httpd server running
strict policy.
Couldn't start the init process before it hung. 

I ran dmesg | audit2allow -M dmesg and got a nice big module to install.
Since this is only for learning on a test network I decided to add the
whole module.

When I ran semodule -i dmesg.pp I got this error:

libsemanage.semanage_link_sandbox: Could not access sandbox base file
/etc/selinux/strict/modules/tmp/base.pp.
semodule:  Failed!

There is no  /etc/selinux/strict/modules or
/etc/selinux/strict/modules/tmp/ directory. 
Is this created only when using the policy src.rpm? I did read in a
January '06 post that there was some problems with the
module/module.conf, don't know if this is related.

Pertinent info:
Kernel 2.6.18-1.2239.fc5
Checkpolicy-1.32-1.fc5
selinux-policy-strict.noarch 2.3.7-2.fc5
libsemanage-1.6.17-1
Policycoreutils-1.33.1-1

Thanks guys,

Sean

[Daniel J Walsh]

Leffler, Sean wrote:
>  The Setup: 
>  In VMware (winders based) I created a FC5 barebones httpd server running
>  strict policy.
>  Couldn't start the init process before it hung. 
>
>  I ran dmesg | audit2allow -M dmesg and got a nice big module to install.
>  Since this is only for learning on a test network I decided to add the
>  whole module.
>
>  When I ran semodule -i dmesg.pp I got this error:
>
>  libsemanage.semanage_link_sandbox: Could not access sandbox base file
>  /etc/selinux/strict/modules/tmp/base.pp.
>  semodule:  Failed!
>
>     
Are you running on a strict policy machine?  Or is the machine 
confused?  Which policy packages to you have installed.  You probably 
should install the rpm to make sure the directories get created correctly.
>  There is no  /etc/selinux/strict/modules or
>  /etc/selinux/strict/modules/tmp/ directory. 
>  Is this created only when using the policy src.rpm? I did read in a
>  January '06 post that there was some problems with the
>  module/module.conf, don't know if this is related.
>
>  Pertinent info:
>  Kernel 2.6.18-1.2239.fc5
>  Checkpolicy-1.32-1.fc5
>  selinux-policy-strict.noarch 2.3.7-2.fc5
>  libsemanage-1.6.17-1
>  Policycoreutils-1.33.1-1
>
>  Thanks guys,
>
>  Sean
>
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>

[Leffler, Sean]

Dan, 

via 'yum list installed' I get the following:

selinux-policy.noarch 
selinux-policy-strict.noarch
selinux-policy-targeted.noarch
All 3 are version 2.3.7-2.fc5

I removed those and yum'd selinux-policy-strict which installed the
following:

selinux-policy.noarch 
selinux-policy-strict.noarch
(version 2.3.7-2.fc5)

I enabled strict, permissive in the /etc/selinux/config file; did a
touch /.autorelabel; reboot

Reran the demsg | audit2allow -M dmesg;semodule -i dmesg.pp and got
this: 
semodule:symbol looklup error: /lib/libsemanage.so.1: undefined symbol:
selinux_file_context_local_path

Also, after unintstalling/reinstalling selinux, my semanage is now
broken:

# semange
Traceback (most recent call last):
  File "/usr/sbin/semanage", line 24, in ?
    import seobject
  File "/usr/lib/python2.4/site-packages/seobject.py", line 25, in ?
    from semanage import *;
  File "/usr/lib/python2.4/site-packages/semanage.py", line 5, in ?
    import _semanage
ImportError: /lib/libsemanage.so.1: undefined symbol:
selinux_file_context_local_path

Thanks for your help with this, I sincerely appreciate it!

Sean Leffler
NSTec

Semanage/libsemanage Python Errors

[Leffler, Sean]

I was trying to install latest refpolicy from tresys; to do so required
getting files from the development repo (checkpolicy, policycoreutils).
Policycoreutils requires a newer version of libsemanage. 
After installing libsemanage-1.6.17 I get this python error when running
semanage

# semange
Traceback (most recent call last):
  File "/usr/sbin/semanage", line 24, in ?
    import seobject
  File "/usr/lib/python2.4/site-packages/seobject.py", line 25, in ?
    from semanage import *;
  File "/usr/lib/python2.4/site-packages/semanage.py", line 5, in ?
    import _semanage
ImportError: /lib/libsemanage.so.1: undefined symbol:
selinux_file_context_local_path

Any ideas on how to tackle this?
Thanks gents,

Sean

Semanage/libsemanage Python Errors

[Daniel J Walsh]

Leffler, Sean wrote:
>  I was trying to install latest refpolicy from tresys; to do so
> required
>  getting files from the development repo (checkpolicy, policycoreutils).
>  Policycoreutils requires a newer version of libsemanage. 
>  After installing libsemanage-1.6.17 I get this python error when running
>  semanage
>
>  # semange
>  Traceback (most recent call last):
>    File "/usr/sbin/semanage", line 24, in ?
>      import seobject
>    File "/usr/lib/python2.4/site-packages/seobject.py", line 25, in ?
>      from semanage import *;
>    File "/usr/lib/python2.4/site-packages/semanage.py", line 5, in ?
>      import _semanage
>  ImportError: /lib/libsemanage.so.1: undefined symbol:
>  selinux_file_context_local_path
>
>  Any ideas on how to tackle this?
>  Thanks gents,
>     
You need to get their version of libsemanage also. Or you can grab the 
FC6 version.
>  Sean
>
>
>
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>