<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoPlainText>using the polgengui, i get an error that the type is
unknown (see below).<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>I compared the generated files to
/usr/share/selinux/devel/example.*<o:p></o:p></p>
<p class=MsoPlainText>I can see that I need to add the initial type myapp2_t;<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>... there are some other differences. For example:<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Polgengui's myapp2.te:<o:p></o:p></p>
<p class=MsoPlainText>corecmd_executable_file(pbrun_exec_t)<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>example.te:<o:p></o:p></p>
<p class=MsoPlainText>domain_type(myapp_t)<o:p></o:p></p>
<p class=MsoPlainText>domain_entry_file(myapp_t, myapp_exec_t)<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Do these accomplish essentially the same thing?<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Thanks,<o:p></o:p></p>
<p class=MsoPlainText>Brian<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>+ . ./myapp2.sh<o:p></o:p></p>
<p class=MsoPlainText>++ set -x<o:p></o:p></p>
<p class=MsoPlainText>++ make -f /usr/share/selinux/devel/Makefile<o:p></o:p></p>
<p class=MsoPlainText>Compiling targeted myapp2 module<o:p></o:p></p>
<p class=MsoPlainText>/usr/bin/checkmodule: loading policy configuration
from tmp/myapp2.tmp<o:p></o:p></p>
<p class=MsoPlainText>myapp2.te:22:ERROR 'unknown type myapp2_t' at token ';'
on line 83532:<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>allow myapp2_t myapp2_rw_t:file { create getattr setattr
read write append rename link unlink ioctl lock };<o:p></o:p></p>
<p class=MsoPlainText>/usr/bin/checkmodule: error(s) encountered while
parsing configuration<o:p></o:p></p>
<p class=MsoPlainText>make: *** [tmp/myapp2.mod] Error 1<o:p></o:p></p>
<p class=MsoPlainText>++ /usr/sbin/semodule -i myapp2.pp<o:p></o:p></p>
<p class=MsoPlainText>libsepol.check_assertion_helper: assertion on line 0
violated by allow myapp2_t system_chkpwd_t:process { transition };<o:p></o:p></p>
<p class=MsoPlainText>libsepol.check_assertion_helper: assertion on line 0
violated by allow myapp2_t updpwd_t:process { transition };<o:p></o:p></p>
<p class=MsoPlainText>libsepol.check_assertion_helper: assertion on line 0
violated by allow system_chkpwd_t myapp2_t:process { sigchld };<o:p></o:p></p>
<p class=MsoPlainText>libsepol.check_assertion_helper: assertion on line 0
violated by allow updpwd_t myapp2_t:process { sigchld };<o:p></o:p></p>
<p class=MsoPlainText>libsepol.check_assertions: 4 assertion violations occured<o:p></o:p></p>
<p class=MsoPlainText>libsemanage.semanage_expand_sandbox: Expand module failed<o:p></o:p></p>
<p class=MsoPlainText>/usr/sbin/semodule: Failed!<o:p></o:p></p>
<p class=MsoPlainText>++ /sbin/restorecon -F -R -v /usr/local/bin/myapp2<o:p></o:p></p>
<p class=MsoPlainText>/sbin/restorecon reset /usr/local/bin/myapp2 context
system_u:object_r:bin_t:s0->system_u:object_r:bin_t:s0<o:p></o:p></p>
<p class=MsoPlainText>++ /sbin/restorecon -F -R -v /etc/pb.settings<o:p></o:p></p>
<p class=MsoPlainText>/sbin/restorecon reset /etc/pb.settings context system_u:object_r:etc_t:s0->system_u:object_r:etc_t:s0<o:p></o:p></p>
<p class=MsoPlainText>++ /usr/sbin/semanage port -a -t myapp2_port_t -p tcp
23000<o:p></o:p></p>
<p class=MsoPlainText>libsepol.context_from_record: type myapp2_port_t is not
defined<o:p></o:p></p>
<p class=MsoPlainText>libsepol.context_from_record: could not create context
structure<o:p></o:p></p>
<p class=MsoPlainText>libsepol.port_from_record: could not create port
structure for range 23000:23000 (tcp)<o:p></o:p></p>
<p class=MsoPlainText>libsepol.sepol_port_modify: could not load port range
23000 - 23000 (tcp)<o:p></o:p></p>
<p class=MsoPlainText>libsemanage.dbase_policydb_modify: could not modify
record value<o:p></o:p></p>
<p class=MsoPlainText>libsemanage.semanage_base_merge_components: could not
merge local modifications into policy<o:p></o:p></p>
<p class=MsoPlainText>/usr/sbin/semanage: Could not add port tcp/23000<o:p></o:p></p>
<p class=MsoPlainText>++ echo -ne '\033]0;root@localhost:~'<o:p></o:p></p>
<p class=MsoPlainText>[root@localhost ~]# <o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>`<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>