Re: using cron in selinux policy

[Karl MacMillan <kmacmill@redhat.com>]

On Wed, 2007-04-18 at 09:04 -0400, Daniel J Walsh wrote:
> Michael C Thompson wrote:
> > Hey Dan,
> >
> > So, for some reason I can't schedule cron jobs with the custom user I 
> > wrote for our test execution. From what I've looked it, I think I need 
> > to call cron_per_role_template, but doing so causes the policy to fail 
> > to build, claiming abat_crond_t is being defined twice. I'm guessing 
> > calling cron_per_role_template explicitly is not the solution, and 
> > that the interfaces I need to be calling have probably changed.
> >
> > If you have a moment, can you please look help me look at this?
> >
> > Thanks,
> > Mike
> This looks to me like a compiler problem.
> 
> policy_module(testadm,1.0.0)
> 
> userdom_admin_user_template(testadm)
> cron_per_role_template(testadm, testadm_t, testadm_r)
> 
> Causes the same problem.  I also got this to happen with 
> ethereal_per_role_template.  Compiler says that the type is defined 
> twice, even though I only see it once.  However there is a gen_requires 
> of the type before the declaration which might be causing the problem.
> 

That's what is causing the problem - can you just remove the requires?
Josh - I thought we were going to do promotion of requires at one point.
Did you decide against that?

Karl

> If I create a testadm.te file like above
> 
> make -f /usr/share/selinux/devel/Makefile
> Compiling targeted test module
> /usr/bin/checkmodule:  loading policy configuration from tmp/test.tmp
> test.te:4:ERROR 'duplicate declaration of type/attribute' at token ';' 
> on line 102058:
>         type testadm_crond_t;
> #line 4
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> make: *** [tmp/test.mod] Error 1
> 
> 
> 


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.