With container-selinux

gistfile1.txt

rm -f *~ *.if *.tc *.pp *.pp.bz2 local_settings.sh
rm -rf tmp *.tar.gz
make -f /usr/share/selinux/devel/Makefile os-ovs.pp
make[1]: Entering directory '/root/openstack-selinux'
/usr/share/selinux/devel/include/contrib/container.if:14: Error: duplicate definition of container_runtime_domtrans(). Original definition on 14.
/usr/share/selinux/devel/include/contrib/container.if:41: Error: duplicate definition of container_runtime_run(). Original definition on 41.
/usr/share/selinux/devel/include/contrib/container.if:61: Error: duplicate definition of container_runtime_exec(). Original definition on 61.
/usr/share/selinux/devel/include/contrib/container.if:80: Error: duplicate definition of container_read_state(). Original definition on 80.
/usr/share/selinux/devel/include/contrib/container.if:98: Error: duplicate definition of container_search_lib(). Original definition on 98.
/usr/share/selinux/devel/include/contrib/container.if:117: Error: duplicate definition of container_exec_lib(). Original definition on 117.
/usr/share/selinux/devel/include/contrib/container.if:136: Error: duplicate definition of container_read_lib_files(). Original definition on 136.
/usr/share/selinux/devel/include/contrib/container.if:155: Error: duplicate definition of container_read_share_files(). Original definition on 155.
/usr/share/selinux/devel/include/contrib/container.if:177: Error: duplicate definition of container_exec_share_files(). Original definition on 177.
/usr/share/selinux/devel/include/contrib/container.if:195: Error: duplicate definition of container_manage_lib_files(). Original definition on 195.
/usr/share/selinux/devel/include/contrib/container.if:215: Error: duplicate definition of container_manage_files(). Original definition on 215.
/usr/share/selinux/devel/include/contrib/container.if:234: Error: duplicate definition of container_manage_dirs(). Original definition on 234.
/usr/share/selinux/devel/include/contrib/container.if:252: Error: duplicate definition of container_manage_lib_dirs(). Original definition on 252.
/usr/share/selinux/devel/include/contrib/container.if:288: Error: duplicate definition of container_lib_filetrans(). Original definition on 288.
/usr/share/selinux/devel/include/contrib/container.if:306: Error: duplicate definition of container_read_pid_files(). Original definition on 306.
/usr/share/selinux/devel/include/contrib/container.if:325: Error: duplicate definition of container_systemctl(). Original definition on 325.
/usr/share/selinux/devel/include/contrib/container.if:350: Error: duplicate definition of container_rw_sem(). Original definition on 350.
/usr/share/selinux/devel/include/contrib/container.if:368: Error: duplicate definition of container_use_ptys(). Original definition on 368.
/usr/share/selinux/devel/include/contrib/container.if:386: Error: duplicate definition of container_filetrans_named_content(). Original definition on 386.
/usr/share/selinux/devel/include/contrib/container.if:434: Error: duplicate definition of container_stream_connect(). Original definition on 434.
/usr/share/selinux/devel/include/contrib/container.if:455: Error: duplicate definition of container_spc_stream_connect(). Original definition on 455.
/usr/share/selinux/devel/include/contrib/container.if:476: Error: duplicate definition of container_admin(). Original definition on 476.
/usr/share/selinux/devel/include/contrib/container.if:523: Error: duplicate definition of container_auth_domtrans(). Original definition on 523.
/usr/share/selinux/devel/include/contrib/container.if:542: Error: duplicate definition of container_auth_exec(). Original definition on 542.
/usr/share/selinux/devel/include/contrib/container.if:561: Error: duplicate definition of container_auth_stream_connect(). Original definition on 561.
/usr/share/selinux/devel/include/contrib/container.if:580: Error: duplicate definition of container_runtime_typebounds(). Original definition on 580.
/usr/share/selinux/devel/include/contrib/container.if:599: Error: duplicate definition of container_runtime_entrypoint(). Original definition on 599.
/usr/share/selinux/devel/include/contrib/container.if:606: Error: duplicate definition of docker_exec_lib(). Original definition on 606.
/usr/share/selinux/devel/include/contrib/container.if:610: Error: duplicate definition of docker_read_share_files(). Original definition on 610.
/usr/share/selinux/devel/include/contrib/container.if:614: Error: duplicate definition of docker_exec_share_files(). Original definition on 614.
/usr/share/selinux/devel/include/contrib/container.if:618: Error: duplicate definition of docker_manage_lib_files(). Original definition on 618.
/usr/share/selinux/devel/include/contrib/container.if:623: Error: duplicate definition of docker_manage_lib_dirs(). Original definition on 623.
/usr/share/selinux/devel/include/contrib/container.if:627: Error: duplicate definition of docker_lib_filetrans(). Original definition on 627.
/usr/share/selinux/devel/include/contrib/container.if:631: Error: duplicate definition of docker_read_pid_files(). Original definition on 631.
/usr/share/selinux/devel/include/contrib/container.if:635: Error: duplicate definition of docker_systemctl(). Original definition on 635.
/usr/share/selinux/devel/include/contrib/container.if:639: Error: duplicate definition of docker_use_ptys(). Original definition on 639.
/usr/share/selinux/devel/include/contrib/container.if:643: Error: duplicate definition of docker_stream_connect(). Original definition on 643.
/usr/share/selinux/devel/include/contrib/container.if:647: Error: duplicate definition of docker_spc_stream_connect(). Original definition on 647.
/usr/share/selinux/devel/include/contrib/container.if:661: Error: duplicate definition of container_spc_read_state(). Original definition on 661.
/usr/share/selinux/devel/include/contrib/container.if:680: Error: duplicate definition of container_domain_template(). Original definition on 680.
/usr/share/selinux/devel/include/contrib/container.if:709: Error: duplicate definition of container_spc_rw_pipes(). Original definition on 709.
Compiling targeted os-ovs module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-ovs.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-ovs.mod
Creating targeted os-ovs.pp policy package
rm tmp/os-ovs.mod tmp/os-ovs.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-ovs.pp -> os-ovs.pp.bz2
bzip2 -9 os-ovs.pp
make -f /usr/share/selinux/devel/Makefile os-swift.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-swift module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-swift.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-swift.mod
Creating targeted os-swift.pp policy package
rm tmp/os-swift.mod tmp/os-swift.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-swift.pp -> os-swift.pp.bz2
bzip2 -9 os-swift.pp
make -f /usr/share/selinux/devel/Makefile os-nova.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-nova module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-nova.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-nova.mod
Creating targeted os-nova.pp policy package
rm tmp/os-nova.mod tmp/os-nova.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-nova.pp -> os-nova.pp.bz2
bzip2 -9 os-nova.pp
make -f /usr/share/selinux/devel/Makefile os-neutron.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-neutron module
os-neutron.te:72: Warning: seutil_exec_restorecon(neutron_t) has been deprecated, please use seutil_exec_setfiles() instead.
/usr/bin/checkmodule:  loading policy configuration from tmp/os-neutron.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-neutron.mod
Creating targeted os-neutron.pp policy package
rm tmp/os-neutron.mod tmp/os-neutron.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-neutron.pp -> os-neutron.pp.bz2
bzip2 -9 os-neutron.pp
make -f /usr/share/selinux/devel/Makefile os-mysql.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-mysql module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-mysql.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-mysql.mod
Creating targeted os-mysql.pp policy package
rm tmp/os-mysql.mod.fc tmp/os-mysql.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-mysql.pp -> os-mysql.pp.bz2
bzip2 -9 os-mysql.pp
make -f /usr/share/selinux/devel/Makefile os-glance.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-glance module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-glance.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-glance.mod
Creating targeted os-glance.pp policy package
rm tmp/os-glance.mod tmp/os-glance.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-glance.pp -> os-glance.pp.bz2
bzip2 -9 os-glance.pp
make -f /usr/share/selinux/devel/Makefile os-rsync.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-rsync module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-rsync.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-rsync.mod
Creating targeted os-rsync.pp policy package
rm tmp/os-rsync.mod tmp/os-rsync.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-rsync.pp -> os-rsync.pp.bz2
bzip2 -9 os-rsync.pp
make -f /usr/share/selinux/devel/Makefile os-rabbitmq.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-rabbitmq module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-rabbitmq.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-rabbitmq.mod
Creating targeted os-rabbitmq.pp policy package
rm tmp/os-rabbitmq.mod.fc tmp/os-rabbitmq.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-rabbitmq.pp -> os-rabbitmq.pp.bz2
bzip2 -9 os-rabbitmq.pp
make -f /usr/share/selinux/devel/Makefile os-keepalived.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-keepalived module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-keepalived.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-keepalived.mod
Creating targeted os-keepalived.pp policy package
rm tmp/os-keepalived.mod tmp/os-keepalived.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-keepalived.pp -> os-keepalived.pp.bz2
bzip2 -9 os-keepalived.pp
make -f /usr/share/selinux/devel/Makefile os-keystone.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-keystone module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-keystone.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-keystone.mod
Creating targeted os-keystone.pp policy package
rm tmp/os-keystone.mod.fc tmp/os-keystone.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-keystone.pp -> os-keystone.pp.bz2
bzip2 -9 os-keystone.pp
make -f /usr/share/selinux/devel/Makefile os-haproxy.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-haproxy module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-haproxy.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-haproxy.mod
Creating targeted os-haproxy.pp policy package
rm tmp/os-haproxy.mod.fc tmp/os-haproxy.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-haproxy.pp -> os-haproxy.pp.bz2
bzip2 -9 os-haproxy.pp
make -f /usr/share/selinux/devel/Makefile os-mongodb.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-mongodb module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-mongodb.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-mongodb.mod
Creating targeted os-mongodb.pp policy package
rm tmp/os-mongodb.mod.fc tmp/os-mongodb.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-mongodb.pp -> os-mongodb.pp.bz2
bzip2 -9 os-mongodb.pp
make -f /usr/share/selinux/devel/Makefile os-ipxe.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-ipxe module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-ipxe.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-ipxe.mod
Creating targeted os-ipxe.pp policy package
rm tmp/os-ipxe.mod tmp/os-ipxe.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-ipxe.pp -> os-ipxe.pp.bz2
bzip2 -9 os-ipxe.pp
make -f /usr/share/selinux/devel/Makefile os-redis.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-redis module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-redis.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-redis.mod
Creating targeted os-redis.pp policy package
rm tmp/os-redis.mod.fc tmp/os-redis.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-redis.pp -> os-redis.pp.bz2
bzip2 -9 os-redis.pp
make -f /usr/share/selinux/devel/Makefile os-cinder.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-cinder module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-cinder.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-cinder.mod
Creating targeted os-cinder.pp policy package
rm tmp/os-cinder.mod tmp/os-cinder.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-cinder.pp -> os-cinder.pp.bz2
bzip2 -9 os-cinder.pp
make -f /usr/share/selinux/devel/Makefile os-httpd.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-httpd module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-httpd.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-httpd.mod
Creating targeted os-httpd.pp policy package
rm tmp/os-httpd.mod.fc tmp/os-httpd.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-httpd.pp -> os-httpd.pp.bz2
bzip2 -9 os-httpd.pp
make -f /usr/share/selinux/devel/Makefile os-gnocchi.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-gnocchi module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-gnocchi.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-gnocchi.mod
Creating targeted os-gnocchi.pp policy package
rm tmp/os-gnocchi.mod tmp/os-gnocchi.mod.fc
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-gnocchi.pp -> os-gnocchi.pp.bz2
bzip2 -9 os-gnocchi.pp
make -f /usr/share/selinux/devel/Makefile os-collectd.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-collectd module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-collectd.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-collectd.mod
Creating targeted os-collectd.pp policy package
rm tmp/os-collectd.mod.fc tmp/os-collectd.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-collectd.pp -> os-collectd.pp.bz2
bzip2 -9 os-collectd.pp
make -f /usr/share/selinux/devel/Makefile os-virt.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-virt module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-virt.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-virt.mod
Creating targeted os-virt.pp policy package
rm tmp/os-virt.mod.fc tmp/os-virt.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-virt.pp -> os-virt.pp.bz2
bzip2 -9 os-virt.pp
make -f /usr/share/selinux/devel/Makefile os-dnsmasq.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-dnsmasq module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-dnsmasq.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-dnsmasq.mod
Creating targeted os-dnsmasq.pp policy package
rm tmp/os-dnsmasq.mod.fc tmp/os-dnsmasq.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-dnsmasq.pp -> os-dnsmasq.pp.bz2
bzip2 -9 os-dnsmasq.pp
make -f /usr/share/selinux/devel/Makefile os-octavia.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-octavia module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-octavia.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-octavia.mod
Creating targeted os-octavia.pp policy package
rm tmp/os-octavia.mod.fc tmp/os-octavia.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-octavia.pp -> os-octavia.pp.bz2
bzip2 -9 os-octavia.pp
make -f /usr/share/selinux/devel/Makefile os-podman.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-podman module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-podman.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-podman.mod
Creating targeted os-podman.pp policy package
rm tmp/os-podman.mod.fc tmp/os-podman.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-podman.pp -> os-podman.pp.bz2
bzip2 -9 os-podman.pp
make -f /usr/share/selinux/devel/Makefile os-rsyslog.pp
make[1]: Entering directory '/root/openstack-selinux'
Compiling targeted os-rsyslog module
/usr/bin/checkmodule:  loading policy configuration from tmp/os-rsyslog.tmp
/usr/bin/checkmodule:  policy configuration loaded
/usr/bin/checkmodule:  writing binary representation (version 19) to tmp/os-rsyslog.mod
Creating targeted os-rsyslog.pp policy package
rm tmp/os-rsyslog.mod.fc tmp/os-rsyslog.mod
make[1]: Leaving directory '/root/openstack-selinux'
Compressing os-rsyslog.pp -> os-rsyslog.pp.bz2
bzip2 -9 os-rsyslog.pp
sed -e 's/@MODULES@/os-ovs os-swift os-nova os-neutron os-mysql os-glance os-rsync os-rabbitmq os-keepalived os-keystone os-haproxy os-mongodb os-ipxe os-redis os-cinder os-httpd os-gnocchi os-collectd os-virt os-dnsmasq os-octavia os-podman os-rsyslog/' local_settings.sh.in > local_settings.sh
chmod 0755 local_settings.sh
# Install the setup script
install -d /usr/share/openstack-selinux/master
install -m 0755 local_settings.sh /usr/share/openstack-selinux/master
# Install tests
install -d /usr/share/openstack-selinux/master/tests
install -m 0644 tests/bz* /usr/share/openstack-selinux/master/tests
install -m 0755 tests/check_all /usr/share/openstack-selinux/master/tests
# Install interfaces
install -d /usr/share/selinux/devel/include/services
install -m 0644 os-ovs.if os-swift.if os-nova.if os-neutron.if os-mysql.if os-glance.if os-rsync.if os-rabbitmq.if os-keepalived.if os-keystone.if os-haproxy.if os-mongodb.if os-ipxe.if os-redis.if os-cinder.if os-httpd.if os-gnocchi.if os-collectd.if os-virt.if os-dnsmasq.if os-octavia.if os-podman.if os-rsyslog.if /usr/share/selinux/devel/include/services
# Install policy modules
install -d /usr/share/selinux/packages
install -m 0644 os-ovs.pp.bz2 os-swift.pp.bz2 os-nova.pp.bz2 os-neutron.pp.bz2 os-mysql.pp.bz2 os-glance.pp.bz2 os-rsync.pp.bz2 os-rabbitmq.pp.bz2 os-keepalived.pp.bz2 os-keystone.pp.bz2 os-haproxy.pp.bz2 os-mongodb.pp.bz2 os-ipxe.pp.bz2 os-redis.pp.bz2 os-cinder.pp.bz2 os-httpd.pp.bz2 os-gnocchi.pp.bz2 os-collectd.pp.bz2 os-virt.pp.bz2 os-dnsmasq.pp.bz2 os-octavia.pp.bz2 os-podman.pp.bz2 os-rsyslog.pp.bz2 /usr/share/selinux/packages
cd /usr/share/openstack-selinux/master && ./local_settings.sh			;\
cd /usr/share/openstack-selinux/master/tests && ./check_all			;\
RET=$?							;\
cd /usr/share/openstack-selinux/master && ./local_settings.sh -x		;\
if [[ "$RET" -ne 0 ]]; then				\
	/bin/false					;\
else							\
	/bin/true					;\
fi
Setting up ports...
Installing OpenStack extra policies and setting booleans...
Setting OpenStack booleans...
Relabeling files...
Reloading SELinux policies...
Results: 770 total, 0 failed
Overall result: PASS
Removing OpenStack modules...
Relabeling files...
Reloading SELinux policies...