From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129])
	by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with SMTP id l2N6b7sW018778
	for <selinux@tycho.nsa.gov>; Fri, 23 Mar 2007 02:37:07 -0400
Received: from nz-out-0506.google.com (jazzhorn.ncsc.mil [144.51.5.9])
	by jazzhorn.ncsc.mil (8.12.10/8.12.10) with ESMTP id l2N6b76W008248
	for <selinux@tycho.nsa.gov>; Fri, 23 Mar 2007 06:37:07 GMT
Received: by nz-out-0506.google.com with SMTP id z3so671465nzf
        for <selinux@tycho.nsa.gov>; Thu, 22 Mar 2007 23:37:06 -0700 (PDT)
Message-ID: <4603749D.2020106@gmail.com>
Date: Fri, 23 Mar 2007 14:33:01 +0800
From: "Nerazzurri.YANG" <spng.yang@gmail.com>
MIME-Version: 1.0
To: selinux@tycho.nsa.gov
Subject: some errors in installing pp
Content-Type: text/plain; charset=UTF-8; format=flowed
Sender: owner-selinux@tycho.nsa.gov
List-Id: selinux@tycho.nsa.gov


hi all,

i install a local pp in fc7 rawhide, but there are
some errors, i do not understand:

libsepol.print_missing_requirements: mymono's global requirements were 
not met: type/attribute self
libsemanage.semanage_link_sandbox: Link packages failed
semodule:  Failed!


my ".te" file is as:


module mymono 1.0;

require {
	type unconfined_t;
	type automount_t;
	type init_t;
	type pcscd_t;
	type default_t;
	type sysfs_t;
	type semanage_t;
	type setroubleshootd_t;
	type xdm_t;
	type initrc_t;
	type bluetooth_t;
	type insmod_t;
	type gpm_t;
	type var_lib_t;
	type hplip_t;
	type unlabeled_t;
	type var_run_t;
	type kernel_t;
	type locate_t;
	type consolekit_t;
	type klogd_t;
	type xdm_xserver_t;
	type httpd_t;
	type hald_acl_t;
	type cupsd_t;
	type nscd_var_run_t;
	type udev_t;
	type rpcd_t;
	type hald_t;
	type rpm_t;
	type getty_t;
	type mono_t;
	type crond_t;
	type random_device_t;
	type self;
	class sock_file write;
	class file { write setattr };
	class dir { search getattr };
	class chr_file read;
}

#============= automount_t ==============
allow automount_t random_device_t:chr_file read;

#============= consolekit_t ==============
allow consolekit_t var_lib_t:dir search;

#============= hald_acl_t ==============
allow hald_acl_t nscd_var_run_t:dir search;

#============= insmod_t ==============
allow insmod_t sysfs_t:file write;

#============= locate_t ==============
allow locate_t unlabeled_t:dir getattr;

#============= mono_t ==============
allow mono_t bluetooth_t:file write;
allow mono_t crond_t:file write;
allow mono_t cupsd_t:file write;
allow mono_t getty_t:file write;
allow mono_t gpm_t:file write;
allow mono_t hald_t:file write;
allow mono_t hplip_t:file write;
allow mono_t httpd_t:file write;
allow mono_t init_t:file write;
allow mono_t initrc_t:file write;
allow mono_t kernel_t:file write;
allow mono_t klogd_t:file write;
allow mono_t pcscd_t:file write;
allow mono_t rpcd_t:file write;
allow mono_t rpm_t:file write;
allow mono_t self:file setattr;
allow mono_t udev_t:file write;
allow mono_t unconfined_t:file { write setattr };
allow mono_t xdm_t:file write;
allow mono_t xdm_xserver_t:file write;

#============= semanage_t ==============
allow semanage_t default_t:dir search;

#============= setroubleshootd_t ==============
allow setroubleshootd_t var_run_t:sock_file write;


the '.te' file is generated by audit2allow:

"cat /var/log/audit/audit.log | audit2allow -M test"

can any guide me the way to understand above errors generated
by semodule.

thanks in advance.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.