Comments (5)
commented on May 18, 2024
On Mon, Sep 02, 2019 at 12:02:26PM -0700, Wenhui Zhang wrote:
```
cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf
Compiling refpolicy base module
/usr/bin/checkmodule -U deny base.conf -o tmp/base.mod
/usr/bin/checkmodule: loading policy configuration from base.conf
policy/modules/kernel/ubac.te:2490:ERROR 'unrecognized protocol sctp' at token 'portcon' on line 28914:
portcon sctp 512-1023 system_u:object_r:hi_reserved_port_t
portcon sctp 1024-65535 system_u:object_r:unreserved_port_t
/usr/bin/checkmodule: error(s) encountered while parsing configuration
Rules.modular:102: recipe for target 'tmp/base.mod' failed
make: *** [tmp/base.mod] Error 1
```
```
***@***.***:~/Downloads$ uname -a
Linux wenhui 4.18.0 #1 SMP Sun Aug 25 22:09:08 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux
```
What version of SELinux user space do you use?
…
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
#85
--
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift
from refpolicy.
wenhuizhang
commented on May 18, 2024
On Mon, Sep 02, 2019 at 12:02:26PM -0700, Wenhui Zhang wrote:
cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf Compiling refpolicy base module /usr/bin/checkmodule -U deny base.conf -o tmp/base.mod /usr/bin/checkmodule: loading policy configuration from base.conf policy/modules/kernel/ubac.te:2490:ERROR 'unrecognized protocol sctp' at token 'portcon' on line 28914: portcon sctp 512-1023 system_u:object_r:hi_reserved_port_t portcon sctp 1024-65535 system_u:object_r:unreserved_port_t /usr/bin/checkmodule: error(s) encountered while parsing configuration Rules.modular:102: recipe for target 'tmp/base.mod' failed make: *** [tmp/base.mod] Error 1***@***.***:~/Downloads$ uname -a Linux wenhui 4.18.0 #1 SMP Sun Aug 25 22:09:08 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux
What version of SELinux user space do you use?
…
-- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: #85
-- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift
### 2.20190609
from refpolicy.
commented on May 18, 2024
On Mon, Sep 02, 2019 at 12:07:55PM -0700, Wenhui Zhang wrote:
> On Mon, Sep 02, 2019 at 12:02:26PM -0700, Wenhui Zhang wrote: ``` cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf Compiling refpolicy base module /usr/bin/checkmodule -U deny base.conf -o tmp/base.mod /usr/bin/checkmodule: loading policy configuration from base.conf policy/modules/kernel/ubac.te:2490:ERROR 'unrecognized protocol sctp' at token 'portcon' on line 28914: portcon sctp 512-1023 system_u:object_r:hi_reserved_port_t portcon sctp 1024-65535 system_u:object_r:unreserved_port_t /usr/bin/checkmodule: error(s) encountered while parsing configuration Rules.modular:102: recipe for target 'tmp/base.mod' failed make: *** [tmp/base.mod] Error 1 ``` ``` ***@***.***:~/Downloads$ uname -a Linux wenhui 4.18.0 #1 SMP Sun Aug 25 22:09:08 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux ```
> What version of SELinux user space do you use?
> […](#)
> -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: #85
> -- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift
**### 2.20190609**
That's refpolicy version. I am wondering about the version of the SELinux user space (libsepol/libselinux etc)
…
--
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
#85 (comment)
--
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift
from refpolicy.
commented on May 18, 2024
On Mon, Sep 02, 2019 at 09:06:23PM +0200, Dominick Grift wrote:
On Mon, Sep 02, 2019 at 12:02:26PM -0700, Wenhui Zhang wrote:
> ```
> cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf
> Compiling refpolicy base module
> /usr/bin/checkmodule -U deny base.conf -o tmp/base.mod
> /usr/bin/checkmodule: loading policy configuration from base.conf
> policy/modules/kernel/ubac.te:2490:ERROR 'unrecognized protocol sctp' at token 'portcon' on line 28914:
> portcon sctp 512-1023 system_u:object_r:hi_reserved_port_t
> portcon sctp 1024-65535 system_u:object_r:unreserved_port_t
> /usr/bin/checkmodule: error(s) encountered while parsing configuration
> Rules.modular:102: recipe for target 'tmp/base.mod' failed
> make: *** [tmp/base.mod] Error 1
> ```
>
>
> ```
> ***@***.***:~/Downloads$ uname -a
> Linux wenhui 4.18.0 #1 SMP Sun Aug 25 22:09:08 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux
>
> ```
>
We should probably add more clarity about the minimum requirements: Linux v4.16 + SELinux v2.8
…
>
>
> --
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly or view it on GitHub:
> #85
--
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift
--
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift
from refpolicy.
wenhuizhang
commented on May 18, 2024
On Mon, Sep 02, 2019 at 09:06:23PM +0200, Dominick Grift wrote: On Mon, Sep 02, 2019 at 12:02:26PM -0700, Wenhui Zhang wrote: >
> cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf > Compiling refpolicy base module > /usr/bin/checkmodule -U deny base.conf -o tmp/base.mod > /usr/bin/checkmodule: loading policy configuration from base.conf > policy/modules/kernel/ubac.te:2490:ERROR 'unrecognized protocol sctp' at token 'portcon' on line 28914: > portcon sctp 512-1023 system_u:object_r:hi_reserved_port_t > portcon sctp 1024-65535 system_u:object_r:unreserved_port_t > /usr/bin/checkmodule: error(s) encountered while parsing configuration > Rules.modular:102: recipe for target 'tmp/base.mod' failed > make: *** [tmp/base.mod] Error 1 >> > >> ***@***.***:~/Downloads$ uname -a > Linux wenhui 4.18.0 #1 SMP Sun Aug 25 22:09:08 EDT 2019 x86_64 x86_64 x86_64 GNU/Linux > >>
We should probably add more clarity about the minimum requirements: Linux v4.16 + SELinux v2.8
…-- > You are receiving this because you are subscribed to this thread. > Reply to this email directly or view it on GitHub: > #85 -- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift
-- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift
Oh, that makes sense, I am using libselinux1 is already the newest version (2.7-2build2). Thanks!
I will update it then.
Thanks Dominick
from refpolicy.
Related Issues (20)
- Q:java based application HOT 5
- Problem when building policy HOT 3
- libsepol.validate_user_datum: Invalid user datum HOT 4
- How to write modules for systemd user services? HOT 7
- libsepol.sepol_string_to_security_class: unrecognized class user_namespace HOT 4
- chrome->nacl_helper: user_namespace HOT 2
- 2 questions HOT 1
- Need help with transitions HOT 1
- Container issues in enforcing mode on Debian 12 HOT 13
- How to transfer the current process or its thread to another context? HOT 4
- Possible missing rule for ssh -> java HOT 2
- Debian 12.1 statd and mountd fail to start with fixed ports HOT 13
- Question: sudo HOT 5
- [Q] Permission cmd in class io_uring not defined in policy. HOT 3
- /root directory has no label specified HOT 4
- systemd v255 executor helper
- Information Disclosure vulnerability related to SSL Private Keys and CSR used by the HTTP daemon HOT 2
- Privileged container spc_t optional HOT 11
- Configuration warnings HOT 2
- Style guide link HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from refpolicy.