Created
March 11, 2019 09:59
-
-
Save nmagnezi/fdfb546944a2138aef15c31a958057c7 to your computer and use it in GitHub Desktop.
tesed on RHEL7.6
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
mkdir: cannot create directory ‘/usr/share/openstack-selinux/master’: No such file or directory | |
[root@rh76osp13-amptest openstack-selinux]# mkdir /usr/share/openstack-selinux/ | |
[root@rh76osp13-amptest openstack-selinux]# mkdir /usr/share/openstack-selinux/master | |
[root@rh76osp13-amptest openstack-selinux]# make clean all install check | |
rm -f *~ *.if *.tc *.pp *.pp.bz2 local_settings.sh | |
rm -rf tmp *.tar.gz | |
make -f /usr/share/selinux/devel/Makefile os-ovs.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
/usr/share/selinux/devel/include/contrib/container.if:14: Error: duplicate definition of container_runtime_domtrans(). Original definition on 14. | |
/usr/share/selinux/devel/include/contrib/container.if:33: Error: duplicate definition of container_runtime_exec(). Original definition on 60. | |
/usr/share/selinux/devel/include/contrib/container.if:52: Error: duplicate definition of container_search_lib(). Original definition on 97. | |
/usr/share/selinux/devel/include/contrib/container.if:71: Error: duplicate definition of container_exec_lib(). Original definition on 116. | |
/usr/share/selinux/devel/include/contrib/container.if:90: Error: duplicate definition of container_read_lib_files(). Original definition on 135. | |
/usr/share/selinux/devel/include/contrib/container.if:109: Error: duplicate definition of container_read_share_files(). Original definition on 154. | |
/usr/share/selinux/devel/include/contrib/container.if:131: Error: duplicate definition of container_exec_share_files(). Original definition on 176. | |
/usr/share/selinux/devel/include/contrib/container.if:149: Error: duplicate definition of container_manage_lib_files(). Original definition on 194. | |
/usr/share/selinux/devel/include/contrib/container.if:169: Error: duplicate definition of container_manage_lib_dirs(). Original definition on 251. | |
/usr/share/selinux/devel/include/contrib/container.if:205: Error: duplicate definition of container_lib_filetrans(). Original definition on 287. | |
/usr/share/selinux/devel/include/contrib/container.if:223: Error: duplicate definition of container_read_pid_files(). Original definition on 305. | |
/usr/share/selinux/devel/include/contrib/container.if:242: Error: duplicate definition of container_systemctl(). Original definition on 324. | |
/usr/share/selinux/devel/include/contrib/container.if:267: Error: duplicate definition of container_rw_sem(). Original definition on 349. | |
/usr/share/selinux/devel/include/contrib/container.if:285: Error: duplicate definition of container_use_ptys(). Original definition on 367. | |
/usr/share/selinux/devel/include/contrib/container.if:303: Error: duplicate definition of container_filetrans_named_content(). Original definition on 385. | |
/usr/share/selinux/devel/include/contrib/container.if:336: Error: duplicate definition of container_stream_connect(). Original definition on 433. | |
/usr/share/selinux/devel/include/contrib/container.if:355: Error: duplicate definition of container_spc_stream_connect(). Original definition on 454. | |
/usr/share/selinux/devel/include/contrib/container.if:376: Error: duplicate definition of container_admin(). Original definition on 475. | |
/usr/share/selinux/devel/include/contrib/container.if:423: Error: duplicate definition of container_spc_read_state(). Original definition on 660. | |
/usr/share/selinux/devel/include/contrib/container.if:441: Error: duplicate definition of container_auth_domtrans(). Original definition on 522. | |
/usr/share/selinux/devel/include/contrib/container.if:460: Error: duplicate definition of container_auth_exec(). Original definition on 541. | |
/usr/share/selinux/devel/include/contrib/container.if:479: Error: duplicate definition of container_auth_stream_connect(). Original definition on 560. | |
/usr/share/selinux/devel/include/contrib/container.if:498: Error: duplicate definition of container_runtime_typebounds(). Original definition on 579. | |
Compiling targeted os-ovs module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-ovs.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-ovs.mod | |
Creating targeted os-ovs.pp policy package | |
rm tmp/os-ovs.mod.fc tmp/os-ovs.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-ovs.pp -> os-ovs.pp.bz2 | |
bzip2 -9 os-ovs.pp | |
make -f /usr/share/selinux/devel/Makefile os-swift.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-swift module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-swift.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-swift.mod | |
Creating targeted os-swift.pp policy package | |
rm tmp/os-swift.mod tmp/os-swift.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-swift.pp -> os-swift.pp.bz2 | |
bzip2 -9 os-swift.pp | |
make -f /usr/share/selinux/devel/Makefile os-nova.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-nova module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-nova.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-nova.mod | |
Creating targeted os-nova.pp policy package | |
rm tmp/os-nova.mod.fc tmp/os-nova.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-nova.pp -> os-nova.pp.bz2 | |
bzip2 -9 os-nova.pp | |
make -f /usr/share/selinux/devel/Makefile os-neutron.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-neutron module | |
os-neutron.te:72: Warning: seutil_exec_restorecon(neutron_t) has been deprecated, please use seutil_exec_setfiles() instead. | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-neutron.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-neutron.mod | |
Creating targeted os-neutron.pp policy package | |
rm tmp/os-neutron.mod tmp/os-neutron.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-neutron.pp -> os-neutron.pp.bz2 | |
bzip2 -9 os-neutron.pp | |
make -f /usr/share/selinux/devel/Makefile os-mysql.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-mysql module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-mysql.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-mysql.mod | |
Creating targeted os-mysql.pp policy package | |
rm tmp/os-mysql.mod.fc tmp/os-mysql.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-mysql.pp -> os-mysql.pp.bz2 | |
bzip2 -9 os-mysql.pp | |
make -f /usr/share/selinux/devel/Makefile os-glance.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-glance module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-glance.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-glance.mod | |
Creating targeted os-glance.pp policy package | |
rm tmp/os-glance.mod tmp/os-glance.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-glance.pp -> os-glance.pp.bz2 | |
bzip2 -9 os-glance.pp | |
make -f /usr/share/selinux/devel/Makefile os-rsync.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-rsync module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-rsync.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-rsync.mod | |
Creating targeted os-rsync.pp policy package | |
rm tmp/os-rsync.mod tmp/os-rsync.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-rsync.pp -> os-rsync.pp.bz2 | |
bzip2 -9 os-rsync.pp | |
make -f /usr/share/selinux/devel/Makefile os-rabbitmq.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-rabbitmq module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-rabbitmq.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-rabbitmq.mod | |
Creating targeted os-rabbitmq.pp policy package | |
rm tmp/os-rabbitmq.mod.fc tmp/os-rabbitmq.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-rabbitmq.pp -> os-rabbitmq.pp.bz2 | |
bzip2 -9 os-rabbitmq.pp | |
make -f /usr/share/selinux/devel/Makefile os-keepalived.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-keepalived module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-keepalived.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-keepalived.mod | |
Creating targeted os-keepalived.pp policy package | |
rm tmp/os-keepalived.mod tmp/os-keepalived.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-keepalived.pp -> os-keepalived.pp.bz2 | |
bzip2 -9 os-keepalived.pp | |
make -f /usr/share/selinux/devel/Makefile os-keystone.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-keystone module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-keystone.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-keystone.mod | |
Creating targeted os-keystone.pp policy package | |
rm tmp/os-keystone.mod.fc tmp/os-keystone.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-keystone.pp -> os-keystone.pp.bz2 | |
bzip2 -9 os-keystone.pp | |
make -f /usr/share/selinux/devel/Makefile os-haproxy.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-haproxy module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-haproxy.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-haproxy.mod | |
Creating targeted os-haproxy.pp policy package | |
rm tmp/os-haproxy.mod.fc tmp/os-haproxy.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-haproxy.pp -> os-haproxy.pp.bz2 | |
bzip2 -9 os-haproxy.pp | |
make -f /usr/share/selinux/devel/Makefile os-mongodb.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-mongodb module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-mongodb.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-mongodb.mod | |
Creating targeted os-mongodb.pp policy package | |
rm tmp/os-mongodb.mod.fc tmp/os-mongodb.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-mongodb.pp -> os-mongodb.pp.bz2 | |
bzip2 -9 os-mongodb.pp | |
make -f /usr/share/selinux/devel/Makefile os-ipxe.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-ipxe module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-ipxe.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-ipxe.mod | |
Creating targeted os-ipxe.pp policy package | |
rm tmp/os-ipxe.mod tmp/os-ipxe.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-ipxe.pp -> os-ipxe.pp.bz2 | |
bzip2 -9 os-ipxe.pp | |
make -f /usr/share/selinux/devel/Makefile os-redis.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-redis module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-redis.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-redis.mod | |
Creating targeted os-redis.pp policy package | |
rm tmp/os-redis.mod.fc tmp/os-redis.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-redis.pp -> os-redis.pp.bz2 | |
bzip2 -9 os-redis.pp | |
make -f /usr/share/selinux/devel/Makefile os-cinder.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-cinder module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-cinder.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-cinder.mod | |
Creating targeted os-cinder.pp policy package | |
rm tmp/os-cinder.mod tmp/os-cinder.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-cinder.pp -> os-cinder.pp.bz2 | |
bzip2 -9 os-cinder.pp | |
make -f /usr/share/selinux/devel/Makefile os-httpd.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-httpd module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-httpd.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-httpd.mod | |
Creating targeted os-httpd.pp policy package | |
rm tmp/os-httpd.mod.fc tmp/os-httpd.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-httpd.pp -> os-httpd.pp.bz2 | |
bzip2 -9 os-httpd.pp | |
make -f /usr/share/selinux/devel/Makefile os-gnocchi.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-gnocchi module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-gnocchi.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-gnocchi.mod | |
Creating targeted os-gnocchi.pp policy package | |
rm tmp/os-gnocchi.mod tmp/os-gnocchi.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-gnocchi.pp -> os-gnocchi.pp.bz2 | |
bzip2 -9 os-gnocchi.pp | |
make -f /usr/share/selinux/devel/Makefile os-collectd.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-collectd module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-collectd.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-collectd.mod | |
Creating targeted os-collectd.pp policy package | |
rm tmp/os-collectd.mod tmp/os-collectd.mod.fc | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-collectd.pp -> os-collectd.pp.bz2 | |
bzip2 -9 os-collectd.pp | |
make -f /usr/share/selinux/devel/Makefile os-virt.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-virt module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-virt.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-virt.mod | |
Creating targeted os-virt.pp policy package | |
rm tmp/os-virt.mod.fc tmp/os-virt.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-virt.pp -> os-virt.pp.bz2 | |
bzip2 -9 os-virt.pp | |
make -f /usr/share/selinux/devel/Makefile os-dnsmasq.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-dnsmasq module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-dnsmasq.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-dnsmasq.mod | |
Creating targeted os-dnsmasq.pp policy package | |
rm tmp/os-dnsmasq.mod.fc tmp/os-dnsmasq.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-dnsmasq.pp -> os-dnsmasq.pp.bz2 | |
bzip2 -9 os-dnsmasq.pp | |
make -f /usr/share/selinux/devel/Makefile os-octavia.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-octavia module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-octavia.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-octavia.mod | |
Creating targeted os-octavia.pp policy package | |
rm tmp/os-octavia.mod.fc tmp/os-octavia.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-octavia.pp -> os-octavia.pp.bz2 | |
bzip2 -9 os-octavia.pp | |
make -f /usr/share/selinux/devel/Makefile os-podman.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-podman module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-podman.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-podman.mod | |
Creating targeted os-podman.pp policy package | |
rm tmp/os-podman.mod.fc tmp/os-podman.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-podman.pp -> os-podman.pp.bz2 | |
bzip2 -9 os-podman.pp | |
make -f /usr/share/selinux/devel/Makefile os-rsyslog.pp | |
make[1]: Entering directory `/root/openstack-selinux' | |
Compiling targeted os-rsyslog module | |
/usr/bin/checkmodule: loading policy configuration from tmp/os-rsyslog.tmp | |
/usr/bin/checkmodule: policy configuration loaded | |
/usr/bin/checkmodule: writing binary representation (version 19) to tmp/os-rsyslog.mod | |
Creating targeted os-rsyslog.pp policy package | |
rm tmp/os-rsyslog.mod.fc tmp/os-rsyslog.mod | |
make[1]: Leaving directory `/root/openstack-selinux' | |
Compressing os-rsyslog.pp -> os-rsyslog.pp.bz2 | |
bzip2 -9 os-rsyslog.pp | |
sed -e 's/@MODULES@/os-ovs os-swift os-nova os-neutron os-mysql os-glance os-rsync os-rabbitmq os-keepalived os-keystone os-haproxy os-mongodb os-ipxe os-redis os-cinder os-httpd os-gnocchi os-collectd os-virt os-dnsmasq os-octavia os-podman os-rsyslog/' local_settings.sh.in > local_settings.sh | |
chmod 0755 local_settings.sh | |
# Install the setup script | |
install -d /usr/share/openstack-selinux/master | |
install -m 0755 local_settings.sh /usr/share/openstack-selinux/master | |
# Install tests | |
install -d /usr/share/openstack-selinux/master/tests | |
install -m 0644 tests/bz* /usr/share/openstack-selinux/master/tests | |
install -m 0755 tests/check_all /usr/share/openstack-selinux/master/tests | |
# Install interfaces | |
install -d /usr/share/selinux/devel/include/services | |
install -m 0644 os-ovs.if os-swift.if os-nova.if os-neutron.if os-mysql.if os-glance.if os-rsync.if os-rabbitmq.if os-keepalived.if os-keystone.if os-haproxy.if os-mongodb.if os-ipxe.if os-redis.if os-cinder.if os-httpd.if os-gnocchi.if os-collectd.if os-virt.if os-dnsmasq.if os-octavia.if os-podman.if os-rsyslog.if /usr/share/selinux/devel/include/services | |
# Install policy modules | |
install -d /usr/share/selinux/packages | |
install -m 0644 os-ovs.pp.bz2 os-swift.pp.bz2 os-nova.pp.bz2 os-neutron.pp.bz2 os-mysql.pp.bz2 os-glance.pp.bz2 os-rsync.pp.bz2 os-rabbitmq.pp.bz2 os-keepalived.pp.bz2 os-keystone.pp.bz2 os-haproxy.pp.bz2 os-mongodb.pp.bz2 os-ipxe.pp.bz2 os-redis.pp.bz2 os-cinder.pp.bz2 os-httpd.pp.bz2 os-gnocchi.pp.bz2 os-collectd.pp.bz2 os-virt.pp.bz2 os-dnsmasq.pp.bz2 os-octavia.pp.bz2 os-podman.pp.bz2 os-rsyslog.pp.bz2 /usr/share/selinux/packages | |
cd /usr/share/openstack-selinux/master && ./local_settings.sh ;\ | |
cd /usr/share/openstack-selinux/master/tests && ./check_all ;\ | |
RET=$? ;\ | |
cd /usr/share/openstack-selinux/master && ./local_settings.sh -x ;\ | |
if [[ "$RET" -ne 0 ]]; then \ | |
/bin/false ;\ | |
else \ | |
/bin/true ;\ | |
fi | |
Setting up ports... | |
Installing OpenStack extra policies and setting booleans... | |
Setting OpenStack booleans... | |
Relabeling files... | |
/sbin/setfiles reset /var/log/yum.log context unconfined_u:object_r:rpm_log_t:s0->system_u:object_r:rpm_log_t:s0 | |
Reloading SELinux policies... | |
Results: 761 total, 0 failed | |
Overall result: PASS | |
Removing OpenStack modules... | |
Relabeling files... | |
Reloading SELinux policies... |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment