Re: strange semanage user|login errors

[Daniel J Walsh <dwalsh@redhat.com>]

On 04/11/2009 12:44 PM, Sebastian Pfaff wrote:
> I think big parts of my selinux installation are broken, i can't do
> any management task:
>
> [root@SecLab selinux_fcontext]# semodule -i *pp
> libsemanage.validate_handler: MLS range s0 for Unix user user exceeds
> allowed range s0:c0.c100 for SELinux user user_u (No such file or
> directory).
> libsemanage.validate_handler: seuser mapping [user ->  (user_u, s0)] is
> invalid (No such file or directory).
> libsemanage.dbase_llist_iterate: could not iterate over records (No
> such file or directory).
> semodule:  Failed
>
> tnx in advance
>
> --
> Sebastian Pfaff
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
You have setup an SELinux user_u record with a range of one category 
s0:c0.c100, and then are trying to add Linux login users to this user 
with a different category s0

semanage user -l | grep user_u

If you want to change the list of categories available to user_u you 
would execute

semanage user -m -r s0-s0:c0.c100 user_u

Which would allow you to add linux users with any range of categories 
form s0 to so:c0.c100.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.