Upon applying this update, I was unable to add an additional port for SSH:
/sbin/semanage port -a -t ssh_port_t -p tcp 1234
libsepol.context_from_record: type pkcs_slotd_unit_file_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.context_from_string: could not create context structure
libsepol.sepol_context_to_sid: could not convert system_u:object_r:pkcs_slotd_unit_file_t:s0 to sid
invalid context system_u:object_r:pkcs_slotd_unit_file_t:s0
libsemanage.semanage_validate_and_compile_fcontexts: setfiles returned error code 255.
OSError: [Errno 0] Error
Looking at sudo dnf history info <tx ID> showed a number of errors during installation:
EDIT: Sorry, didn't realise this was a markdown field. I'll repeat the details above, without additional karma changes for readability:
Upon applying this update, I was unable to add an additional port for SSH:
# /sbin/semanage port -a -t ssh_port_t -p tcp 1234
libsepol.context_from_record: type pkcs_slotd_unit_file_t is not defined
libsepol.context_from_record: could not create context structure
libsepol.context_from_string: could not create context structure
libsepol.sepol_context_to_sid: could not convert system_u:object_r:pkcs_slotd_unit_file_t:s0 to sid
invalid context system_u:object_r:pkcs_slotd_unit_file_t:s0
libsemanage.semanage_validate_and_compile_fcontexts: setfiles returned error code 255.
OSError: [Errno 0] Error
Looking at sudo dnf history info <tx ID> showed a number of errors during installation:
tcp port 1234 is defined as monopd_port_t and commit for this is in repo from 2005-09-13 so, you cannot use -a in semanage becuase it's already defined.
Right - well firstly, I'm afraid port 1234 wasn't the real port I used (I'd rather not disclose the real port) - I should have made that clear, sorry :( - the port I'm using isn't assigned to any pre-existing rule. But fair enough, if I'm the only person getting this, it must be my config somewhere, I'll have a dig - thank you!
/usr/share/selinux/devel/include/contrib/snappy.if: Syntax error on line 260 gen_require [type=GEN_REQ]
/usr/share/selinux/devel/include/contrib/snappy.if: Syntax error on line 263 ' [type=SQUOTE]
/usr/share/selinux/devel/include/contrib/snappy.if: Syntax error on line 273 ' [type=SQUOTE]
This update has been submitted for testing by lvrabec.
lvrabec edited this update.
This update has been pushed to testing.
No regressions found
No regressions noticed.
No regressions found
Upon applying this update, I was unable to add an additional port for SSH:
/sbin/semanage port -a -t ssh_port_t -p tcp 1234
libsepol.context_from_record: type pkcs_slotd_unit_file_t is not defined libsepol.context_from_record: could not create context structure libsepol.context_from_string: could not create context structure libsepol.sepol_context_to_sid: could not convert system_u:object_r:pkcs_slotd_unit_file_t:s0 to sid invalid context system_u:object_r:pkcs_slotd_unit_file_t:s0 libsemanage.semanage_validate_and_compile_fcontexts: setfiles returned error code 255. OSError: [Errno 0] Error
Looking at
sudo dnf history info <tx ID>showed a number of errors during installation:1 neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:8980 2 (neverallow base_typeattr_8 self (capability (sys_module))) 3 <root> 4 allow at /var/lib/selinux/targeted/tmp/modules/300/systemdmodules-syscapability/cil:2 5 (allow init_t self (capability (sys_module))) 6 7 Failed to generate binary <and repeat 6 times>
Upon downgrading back to 283.24, everything worked again, no install errors.
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
EDIT: Sorry, didn't realise this was a markdown field. I'll repeat the details above, without additional karma changes for readability:
Upon applying this update, I was unable to add an additional port for SSH:
Looking at
sudo dnf history info <tx ID>showed a number of errors during installation:Upon downgrading back to 283.24, everything worked again, no install errors.
@stevestorey,
tcp port 1234 is defined as monopd_port_t and commit for this is in repo from 2005-09-13 so, you cannot use -a in semanage becuase it's already defined.
lvrabec@lvrabec-workstation ~ » rpm -q selinux-policy selinux-policy-3.13.1-283.24.fc27.noarch lvrabec@lvrabec-workstation ~ » sudo semanage port -m -t ssh_port_t -p tcp 1234 1 ↵ lvrabec@lvrabec-workstation ~ » sudo semanage port -l | grep 1234
monopd_port_t tcp 1234 ssh_port_t tcp 1234, 22
After update...
lvrabec@lvrabec-workstation ~ » rpm -q selinux-policy
selinux-policy-3.13.1-283.26.fc27.noarch lvrabec@lvrabec-workstation ~ » sudo semanage port -m -t ssh_port_t -p tcp 1234
lvrabec@lvrabec-workstation ~ » sudo semanage port -l | grep 1234
monopd_port_t tcp 1234 ssh_port_t tcp 1234, 22
It looks like you have some custom modifications on your system (e.g: systemdmodules-syscapability) you are stopped by neverallow rule.
This is not issue in selinux-policy update but on your system.
Lukas.
Works for me.
looks good
looks good
Right - well firstly, I'm afraid port 1234 wasn't the real port I used (I'd rather not disclose the real port) - I should have made that clear, sorry :( - the port I'm using isn't assigned to any pre-existing rule. But fair enough, if I'm the only person getting this, it must be my config somewhere, I'll have a dig - thank you!
works for me
selinux-policy-devel-3.13.1-283.26.fc27.noarch reports:
Works
no regressions noted
This update has been submitted for batched by lvrabec.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.