dhcp server policy
Created attachment 23131 [details] file_contexts
Created attachment 23132 [details] type enforcement
Created attachment 23600 [details] file_contexts /var/lib/dhcp is once again system_u:object_r:dhcp_state_t :(
Created attachment 23601 [details] type_enforcement system_u:object_r:dhcp_state_t back in business. chaos restored. ;)
I changed etc_dhcp_t to dhcp_etc_t. committed to policy cvs
committed to portage
hmm, no good # make reload mkdir -p tmp ( cd domains/program/ ; for n in *.te ; do echo "define(\`$n')"; done ) > tmp/program_used_flags.te ( cd domains/misc/ ; for n in *.te ; do echo "define(\`$n')"; done ) >> tmp/program_used_flags.te cat domains/*.te domains/misc/*.te domains/program/*.te > tmp/all_domains.te cat attrib.te tmp/program_used_flags.te tmp/all_macros.te tmp/all_types.te tmp/all_domains.te assert.te > tmp/all.te m4 -Imacros -s tmp/all.te rbac > tmp/te-rbac.m4 m4 -Imacros -s tmp/program_used_flags.te tmp/all_macros.te constraints initial_sid_contexts fs_use genfs_contexts net_contexts > tmp/constraints-contexts.m4 mkdir -p tmp cat flask/security_classes flask/initial_sids flask/access_vectors tmp/te-rbac.m4 users tmp/constraints-contexts.m4 > policy.conf mkdir -p /etc/security/selinux/src install -m 644 -o root -g root policy.conf /etc/security/selinux/src/policy.conf mkdir -p /etc/security/selinux /usr/bin/checkpolicy -o /etc/security/selinux/policy.15 /etc/security/selinux/src/policy.conf /usr/bin/checkpolicy: loading policy configuration from /etc/security/selinux/src/policy.conf ERROR 'name conflict for type alias dhcpc_etc_t' at token ';' on line 30451: type dhcp_etc_t alias { dhcpc_etc_t dhcpd_etc_t }, file_type, sysadmfile; /usr/bin/checkpolicy: error(s) encountered while parsing configuration make: *** [/etc/security/selinux/policy.15] Error 1 ------------- dhcpc_etc_t is being defined in the basepolicy (dhcpc.te) so I would remove dhcpc_etc_t from the alias and insert etc_dhcpd_t for compatibility (as Stephen suggested on the selinux list). or at least remove the dhcpc part ... -type dhcp_etc_t alias { dhcpc_etc_t dhcpd_etc_t }, file_type, sysadmfile; +type dhcp_etc_t alias { etc_dhcpd_t dhcpd_etc_t }, file_type, sysadmfile; bye, peter