Skip to content

Instantly share code, notes, and snippets.

@nmagnezi
Created March 11, 2019 09:59
Show Gist options
  • Save nmagnezi/fdfb546944a2138aef15c31a958057c7 to your computer and use it in GitHub Desktop.
Save nmagnezi/fdfb546944a2138aef15c31a958057c7 to your computer and use it in GitHub Desktop.
tesed on RHEL7.6
mkdir: cannot create directory ‘/usr/share/openstack-selinux/master’: No such file or directory
[root@rh76osp13-amptest openstack-selinux]# mkdir /usr/share/openstack-selinux/
[root@rh76osp13-amptest openstack-selinux]# mkdir /usr/share/openstack-selinux/master
[root@rh76osp13-amptest openstack-selinux]# make clean all install check
rm -f *~ *.if *.tc *.pp *.pp.bz2 local_settings.sh
rm -rf tmp *.tar.gz
make -f /usr/share/selinux/devel/Makefile os-ovs.pp
make[1]: Entering directory `/root/openstack-selinux'
/usr/share/selinux/devel/include/contrib/container.if:14: Error: duplicate definition of container_runtime_domtrans(). Original definition on 14.
/usr/share/selinux/devel/include/contrib/container.if:33: Error: duplicate definition of container_runtime_exec(). Original definition on 60.
/usr/share/selinux/devel/include/contrib/container.if:52: Error: duplicate definition of container_search_lib(). Original definition on 97.
/usr/share/selinux/devel/include/contrib/container.if:71: Error: duplicate definition of container_exec_lib(). Original definition on 116.
/usr/share/selinux/devel/include/contrib/container.if:90: Error: duplicate definition of container_read_lib_files(). Original definition on 135.
/usr/share/selinux/devel/include/contrib/container.if:109: Error: duplicate definition of container_read_share_files(). Original definition on 154.
/usr/share/selinux/devel/include/contrib/container.if:131: Error: duplicate definition of container_exec_share_files(). Original definition on 176.
/usr/share/selinux/devel/include/contrib/container.if:149: Error: duplicate definition of container_manage_lib_files(). Original definition on 194.
/usr/share/selinux/devel/include/contrib/container.if:169: Error: duplicate definition of container_manage_lib_dirs(). Original definition on 251.
/usr/share/selinux/devel/include/contrib/container.if:205: Error: duplicate definition of container_lib_filetrans(). Original definition on 287.
/usr/share/selinux/devel/include/contrib/container.if:223: Error: duplicate definition of container_read_pid_files(). Original definition on 305.
/usr/share/selinux/devel/include/contrib/container.if:242: Error: duplicate definition of container_systemctl(). Original definition on 324.
/usr/share/selinux/devel/include/contrib/container.if:267: Error: duplicate definition of container_rw_sem(). Original definition on 349.
/usr/share/selinux/devel/include/contrib/container.if:285: Error: duplicate definition of container_use_ptys(). Original definition on 367.
/usr/share/selinux/devel/include/contrib/container.if:303: Error: duplicate definition of container_filetrans_named_content(). Original definition on 385.
/usr/share/selinux/devel/include/contrib/container.if:336: Error: duplicate definition of container_stream_connect(). Original definition on 433.
/usr/share/selinux/devel/include/contrib/container.if:355: Error: duplicate definition of container_spc_stream_connect(). Original definition on 454.
/usr/share/selinux/devel/include/contrib/container.if:376: Error: duplicate definition of container_admin(). Original definition on 475.
/usr/share/selinux/devel/include/contrib/container.if:423: Error: duplicate definition of container_spc_read_state(). Original definition on 660.
/usr/share/selinux/devel/include/contrib/container.if:441: Error: duplicate definition of container_auth_domtrans(). Original definition on 522.
/usr/share/selinux/devel/include/contrib/container.if:460: Error: duplicate definition of container_auth_exec(). Original definition on 541.
/usr/share/selinux/devel/include/contrib/container.if:479: Error: duplicate definition of container_auth_stream_connect(). Original definition on 560.
/usr/share/selinux/devel/include/contrib/container.if:498: Error: duplicate definition of container_runtime_typebounds(). Original definition on 579.
Compiling targeted os-ovs module
/usr/bin/checkmodule: loading policy configuration from tmp/os-ovs.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-ovs.mod
Creating targeted os-ovs.pp policy package
rm tmp/os-ovs.mod.fc tmp/os-ovs.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-ovs.pp -> os-ovs.pp.bz2
bzip2 -9 os-ovs.pp
make -f /usr/share/selinux/devel/Makefile os-swift.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-swift module
/usr/bin/checkmodule: loading policy configuration from tmp/os-swift.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-swift.mod
Creating targeted os-swift.pp policy package
rm tmp/os-swift.mod tmp/os-swift.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-swift.pp -> os-swift.pp.bz2
bzip2 -9 os-swift.pp
make -f /usr/share/selinux/devel/Makefile os-nova.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-nova module
/usr/bin/checkmodule: loading policy configuration from tmp/os-nova.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-nova.mod
Creating targeted os-nova.pp policy package
rm tmp/os-nova.mod.fc tmp/os-nova.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-nova.pp -> os-nova.pp.bz2
bzip2 -9 os-nova.pp
make -f /usr/share/selinux/devel/Makefile os-neutron.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-neutron module
os-neutron.te:72: Warning: seutil_exec_restorecon(neutron_t) has been deprecated, please use seutil_exec_setfiles() instead.
/usr/bin/checkmodule: loading policy configuration from tmp/os-neutron.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-neutron.mod
Creating targeted os-neutron.pp policy package
rm tmp/os-neutron.mod tmp/os-neutron.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-neutron.pp -> os-neutron.pp.bz2
bzip2 -9 os-neutron.pp
make -f /usr/share/selinux/devel/Makefile os-mysql.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-mysql module
/usr/bin/checkmodule: loading policy configuration from tmp/os-mysql.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-mysql.mod
Creating targeted os-mysql.pp policy package
rm tmp/os-mysql.mod.fc tmp/os-mysql.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-mysql.pp -> os-mysql.pp.bz2
bzip2 -9 os-mysql.pp
make -f /usr/share/selinux/devel/Makefile os-glance.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-glance module
/usr/bin/checkmodule: loading policy configuration from tmp/os-glance.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-glance.mod
Creating targeted os-glance.pp policy package
rm tmp/os-glance.mod tmp/os-glance.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-glance.pp -> os-glance.pp.bz2
bzip2 -9 os-glance.pp
make -f /usr/share/selinux/devel/Makefile os-rsync.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-rsync module
/usr/bin/checkmodule: loading policy configuration from tmp/os-rsync.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-rsync.mod
Creating targeted os-rsync.pp policy package
rm tmp/os-rsync.mod tmp/os-rsync.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-rsync.pp -> os-rsync.pp.bz2
bzip2 -9 os-rsync.pp
make -f /usr/share/selinux/devel/Makefile os-rabbitmq.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-rabbitmq module
/usr/bin/checkmodule: loading policy configuration from tmp/os-rabbitmq.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-rabbitmq.mod
Creating targeted os-rabbitmq.pp policy package
rm tmp/os-rabbitmq.mod.fc tmp/os-rabbitmq.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-rabbitmq.pp -> os-rabbitmq.pp.bz2
bzip2 -9 os-rabbitmq.pp
make -f /usr/share/selinux/devel/Makefile os-keepalived.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-keepalived module
/usr/bin/checkmodule: loading policy configuration from tmp/os-keepalived.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-keepalived.mod
Creating targeted os-keepalived.pp policy package
rm tmp/os-keepalived.mod tmp/os-keepalived.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-keepalived.pp -> os-keepalived.pp.bz2
bzip2 -9 os-keepalived.pp
make -f /usr/share/selinux/devel/Makefile os-keystone.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-keystone module
/usr/bin/checkmodule: loading policy configuration from tmp/os-keystone.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-keystone.mod
Creating targeted os-keystone.pp policy package
rm tmp/os-keystone.mod.fc tmp/os-keystone.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-keystone.pp -> os-keystone.pp.bz2
bzip2 -9 os-keystone.pp
make -f /usr/share/selinux/devel/Makefile os-haproxy.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-haproxy module
/usr/bin/checkmodule: loading policy configuration from tmp/os-haproxy.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-haproxy.mod
Creating targeted os-haproxy.pp policy package
rm tmp/os-haproxy.mod.fc tmp/os-haproxy.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-haproxy.pp -> os-haproxy.pp.bz2
bzip2 -9 os-haproxy.pp
make -f /usr/share/selinux/devel/Makefile os-mongodb.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-mongodb module
/usr/bin/checkmodule: loading policy configuration from tmp/os-mongodb.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-mongodb.mod
Creating targeted os-mongodb.pp policy package
rm tmp/os-mongodb.mod.fc tmp/os-mongodb.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-mongodb.pp -> os-mongodb.pp.bz2
bzip2 -9 os-mongodb.pp
make -f /usr/share/selinux/devel/Makefile os-ipxe.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-ipxe module
/usr/bin/checkmodule: loading policy configuration from tmp/os-ipxe.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-ipxe.mod
Creating targeted os-ipxe.pp policy package
rm tmp/os-ipxe.mod tmp/os-ipxe.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-ipxe.pp -> os-ipxe.pp.bz2
bzip2 -9 os-ipxe.pp
make -f /usr/share/selinux/devel/Makefile os-redis.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-redis module
/usr/bin/checkmodule: loading policy configuration from tmp/os-redis.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-redis.mod
Creating targeted os-redis.pp policy package
rm tmp/os-redis.mod.fc tmp/os-redis.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-redis.pp -> os-redis.pp.bz2
bzip2 -9 os-redis.pp
make -f /usr/share/selinux/devel/Makefile os-cinder.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-cinder module
/usr/bin/checkmodule: loading policy configuration from tmp/os-cinder.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-cinder.mod
Creating targeted os-cinder.pp policy package
rm tmp/os-cinder.mod tmp/os-cinder.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-cinder.pp -> os-cinder.pp.bz2
bzip2 -9 os-cinder.pp
make -f /usr/share/selinux/devel/Makefile os-httpd.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-httpd module
/usr/bin/checkmodule: loading policy configuration from tmp/os-httpd.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-httpd.mod
Creating targeted os-httpd.pp policy package
rm tmp/os-httpd.mod.fc tmp/os-httpd.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-httpd.pp -> os-httpd.pp.bz2
bzip2 -9 os-httpd.pp
make -f /usr/share/selinux/devel/Makefile os-gnocchi.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-gnocchi module
/usr/bin/checkmodule: loading policy configuration from tmp/os-gnocchi.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-gnocchi.mod
Creating targeted os-gnocchi.pp policy package
rm tmp/os-gnocchi.mod tmp/os-gnocchi.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-gnocchi.pp -> os-gnocchi.pp.bz2
bzip2 -9 os-gnocchi.pp
make -f /usr/share/selinux/devel/Makefile os-collectd.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-collectd module
/usr/bin/checkmodule: loading policy configuration from tmp/os-collectd.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-collectd.mod
Creating targeted os-collectd.pp policy package
rm tmp/os-collectd.mod tmp/os-collectd.mod.fc
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-collectd.pp -> os-collectd.pp.bz2
bzip2 -9 os-collectd.pp
make -f /usr/share/selinux/devel/Makefile os-virt.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-virt module
/usr/bin/checkmodule: loading policy configuration from tmp/os-virt.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-virt.mod
Creating targeted os-virt.pp policy package
rm tmp/os-virt.mod.fc tmp/os-virt.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-virt.pp -> os-virt.pp.bz2
bzip2 -9 os-virt.pp
make -f /usr/share/selinux/devel/Makefile os-dnsmasq.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-dnsmasq module
/usr/bin/checkmodule: loading policy configuration from tmp/os-dnsmasq.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-dnsmasq.mod
Creating targeted os-dnsmasq.pp policy package
rm tmp/os-dnsmasq.mod.fc tmp/os-dnsmasq.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-dnsmasq.pp -> os-dnsmasq.pp.bz2
bzip2 -9 os-dnsmasq.pp
make -f /usr/share/selinux/devel/Makefile os-octavia.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-octavia module
/usr/bin/checkmodule: loading policy configuration from tmp/os-octavia.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-octavia.mod
Creating targeted os-octavia.pp policy package
rm tmp/os-octavia.mod.fc tmp/os-octavia.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-octavia.pp -> os-octavia.pp.bz2
bzip2 -9 os-octavia.pp
make -f /usr/share/selinux/devel/Makefile os-podman.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-podman module
/usr/bin/checkmodule: loading policy configuration from tmp/os-podman.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-podman.mod
Creating targeted os-podman.pp policy package
rm tmp/os-podman.mod.fc tmp/os-podman.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-podman.pp -> os-podman.pp.bz2
bzip2 -9 os-podman.pp
make -f /usr/share/selinux/devel/Makefile os-rsyslog.pp
make[1]: Entering directory `/root/openstack-selinux'
Compiling targeted os-rsyslog module
/usr/bin/checkmodule: loading policy configuration from tmp/os-rsyslog.tmp
/usr/bin/checkmodule: policy configuration loaded
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-rsyslog.mod
Creating targeted os-rsyslog.pp policy package
rm tmp/os-rsyslog.mod.fc tmp/os-rsyslog.mod
make[1]: Leaving directory `/root/openstack-selinux'
Compressing os-rsyslog.pp -> os-rsyslog.pp.bz2
bzip2 -9 os-rsyslog.pp
sed -e 's/@MODULES@/os-ovs os-swift os-nova os-neutron os-mysql os-glance os-rsync os-rabbitmq os-keepalived os-keystone os-haproxy os-mongodb os-ipxe os-redis os-cinder os-httpd os-gnocchi os-collectd os-virt os-dnsmasq os-octavia os-podman os-rsyslog/' local_settings.sh.in > local_settings.sh
chmod 0755 local_settings.sh
# Install the setup script
install -d /usr/share/openstack-selinux/master
install -m 0755 local_settings.sh /usr/share/openstack-selinux/master
# Install tests
install -d /usr/share/openstack-selinux/master/tests
install -m 0644 tests/bz* /usr/share/openstack-selinux/master/tests
install -m 0755 tests/check_all /usr/share/openstack-selinux/master/tests
# Install interfaces
install -d /usr/share/selinux/devel/include/services
install -m 0644 os-ovs.if os-swift.if os-nova.if os-neutron.if os-mysql.if os-glance.if os-rsync.if os-rabbitmq.if os-keepalived.if os-keystone.if os-haproxy.if os-mongodb.if os-ipxe.if os-redis.if os-cinder.if os-httpd.if os-gnocchi.if os-collectd.if os-virt.if os-dnsmasq.if os-octavia.if os-podman.if os-rsyslog.if /usr/share/selinux/devel/include/services
# Install policy modules
install -d /usr/share/selinux/packages
install -m 0644 os-ovs.pp.bz2 os-swift.pp.bz2 os-nova.pp.bz2 os-neutron.pp.bz2 os-mysql.pp.bz2 os-glance.pp.bz2 os-rsync.pp.bz2 os-rabbitmq.pp.bz2 os-keepalived.pp.bz2 os-keystone.pp.bz2 os-haproxy.pp.bz2 os-mongodb.pp.bz2 os-ipxe.pp.bz2 os-redis.pp.bz2 os-cinder.pp.bz2 os-httpd.pp.bz2 os-gnocchi.pp.bz2 os-collectd.pp.bz2 os-virt.pp.bz2 os-dnsmasq.pp.bz2 os-octavia.pp.bz2 os-podman.pp.bz2 os-rsyslog.pp.bz2 /usr/share/selinux/packages
cd /usr/share/openstack-selinux/master && ./local_settings.sh ;\
cd /usr/share/openstack-selinux/master/tests && ./check_all ;\
RET=$? ;\
cd /usr/share/openstack-selinux/master && ./local_settings.sh -x ;\
if [[ "$RET" -ne 0 ]]; then \
/bin/false ;\
else \
/bin/true ;\
fi
Setting up ports...
Installing OpenStack extra policies and setting booleans...
Setting OpenStack booleans...
Relabeling files...
/sbin/setfiles reset /var/log/yum.log context unconfined_u:object_r:rpm_log_t:s0->system_u:object_r:rpm_log_t:s0
Reloading SELinux policies...
Results: 761 total, 0 failed
Overall result: PASS
Removing OpenStack modules...
Relabeling files...
Reloading SELinux policies...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment