Research Menu

.
Skip Search Box

SELinux Mailing List

Re: libsepol.expand_terule_helper: duplicate TE rule

From: Daniel J Walsh <dwalsh_at_redhat.com>
Date: Tue, 04 Dec 2007 22:37:38 -0500


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shintaro Fujiwara wrote:
> 2007/12/4, Daniel J Walsh <dwalsh@redhat.com>:
> Shintaro Fujiwara wrote:

>>>> When I try to install apache.pp,
>>>>
>>>> libsepol.expand_terule_helper: duplicate TE rule for httpd_t
>>>> exim_exec_t:process system_mail_t
>>>> libsepol.expand_module: Error during expand
>>>> libsemanage.semanage_expand_sandbox: Expand module failed
>>>> semodule:  Failed!
>>>>
>>>> I can't find any lines concerning exim_exec_t anywhere...
>>>> Please help.
>>>>
>>>>

> in mta.if,
>
> mta_send_mail has the following
>
>
> domtrans_pattern($1, mailclient_exec_type, system_mail_t)
> allow system_mail_t mailclient_exec_type:file entrypoint;
>
>
> And
>
> interface(`mta_mailclient',`
> gen_require(`
> attribute mailclient_exec_type;
> ')
>
> typeattribute $1 mailclient_exec_type;
> ')
>at

>
> In exim.te
>
> mta_mailclient(exim_exec_t)
>
>> Thank you, but, I commented line,

>
>> mta_send_mail(httpd_t)

>
>> and make apache.pp again but still I have an error.
>> I'm stuck.

>
>

>>
Same error? I would check your source file to make sure mta_send_mail is not coming from somewhere else.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHVh0CrlYvE4MpobMRAgRiAJ9zuF7+6nNB7JWxd+88aMhl1eHEEQCeLPpo DY9lWAfx29hWmugTTSrDw+c=
=P9KS
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Tue 4 Dec 2007 - 22:37:50 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service