Re: SELinux and Xorg error .

On Sun, Sep 20, 2020 at 11:52 AM Cătălin George Feștilă <
[email protected]> wrote:

> After a relabel I got this , any idea ?
> [root@desk mythcat]# ausearch -c 'Xorg' --raw | audit2allow -M my-Xorg
> libsepol.sepol_string_to_security_class: unrecognized class lockdown
> ******************** IMPORTANT ***********************
> To make this policy package active, execute:
>
> semodule -i my-Xorg.pp
>
> [root@desk mythcat]# semodule -X 300 -i my-Xorg.pp
> Failed to resolve allow statement at
> /var/lib/selinux/mls/tmp/modules/300/my-Xorg/cil:7
> semodule:  Failed!
> [root@desk mythcat]# semodule -X 300 -i my-Xorg.pp
> Failed to resolve allow statement at
> /var/lib/selinux/mls/tmp/modules/300/my-Xorg/cil:7
> semodule:  Failed!
> [root@desk mythcat]#  ausearch -c 'X' --raw | audit2allow -M my-X
> libsepol.sepol_string_to_security_class: unrecognized class lockdown
> ******************** IMPORTANT ***********************
> To make this policy package active, execute:
>
> semodule -i my-X.pp
>
> [root@desk mythcat]# semodule -X 300 -i my-X.pp
> Failed to resolve allow statement at
> /var/lib/selinux/mls/tmp/modules/300/my-X/cil:11
> semodule:  Failed!
>
Hi,

mls with X is not supported; however, we do not seem to have the lockdown
class in Fedora at all - did you download this policy from the refpolicy
repo or how did you get it installed to your system?

_______________________________________________
> selinux mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[email protected]
>


-- 

Zdenek Pytela
Security SELinux team

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]