Im not sure what I need todo to make amanda happy with this:
sudo make load
/usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
libsepol.print_missing_requirements: amanda's global requirements were
not met: type/attribute inetd_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file
or directory).
/usr/sbin/semodule: Failed!
make: *** [load] Error 1
do I need amanda and sandbox both working for this to work?
--
Justin P. Mattock
On Fri, Sep 03, 2010 at 08:18:55PM -0700, Justin Mattock wrote:
> Im not sure what I need todo to make amanda happy with this:
> sudo make load
>
> /usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
> libsepol.print_missing_requirements: amanda's global requirements were
> not met: type/attribute inetd_t (No such file or directory).
> libsemanage.semanage_link_sandbox: Link packages failed (No such file
> or directory).
> /usr/sbin/semodule: Failed!
> make: *** [load] Error 1
>
> do I need amanda and sandbox both working for this to work?
Amanda's global requirements were not met. It has policy to interact with inetd_t but the type is not available:
1. is the inetd_t included (made available) in the amanda module?
2. is the xinetd policy installed?
>
>
> --
> Justin P. Mattock
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100904/685c486b/attachment.bin
On 09/04/2010 01:46 AM, Dominick Grift wrote:
> On Fri, Sep 03, 2010 at 08:18:55PM -0700, Justin Mattock wrote:
>> Im not sure what I need todo to make amanda happy with this:
>> sudo make load
>>
>> /usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
>> libsepol.print_missing_requirements: amanda's global requirements were
>> not met: type/attribute inetd_t (No such file or directory).
>> libsemanage.semanage_link_sandbox: Link packages failed (No such file
>> or directory).
>> /usr/sbin/semodule: Failed!
>> make: *** [load] Error 1
>>
>> do I need amanda and sandbox both working for this to work?
>
> Amanda's global requirements were not met. It has policy to interact with inetd_t but the type is not available:
>
> 1. is the inetd_t included (made available) in the amanda module?
> 2. is the xinetd policy installed?
alright... disabling the build of this module, gets me going...
as for the xinetd I don't have that on the system, as well as amanda
Justin P. Mattock
On Sat, Sep 04, 2010 at 06:21:08AM -0700, Justin P. Mattock wrote:
> On 09/04/2010 01:46 AM, Dominick Grift wrote:
> >On Fri, Sep 03, 2010 at 08:18:55PM -0700, Justin Mattock wrote:
> >>Im not sure what I need todo to make amanda happy with this:
> >>sudo make load
> >>
> >> /usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
> >>libsepol.print_missing_requirements: amanda's global requirements were
> >>not met: type/attribute inetd_t (No such file or directory).
> >>libsemanage.semanage_link_sandbox: Link packages failed (No such file
> >>or directory).
> >>/usr/sbin/semodule: Failed!
> >>make: *** [load] Error 1
> >>
> >>do I need amanda and sandbox both working for this to work?
> >
> >Amanda's global requirements were not met. It has policy to interact with inetd_t but the type is not available:
> >
> >1. is the inetd_t included (made available) in the amanda module?
> >2. is the xinetd policy installed?
>
> alright... disabling the build of this module, gets me going...
> as for the xinetd I don't have that on the system, as well as amanda
dependency issue. Ive mentioned issues like this on the IRC channel the other day.
Refpolicy maintainer does not want to change it.
We need semanage/compiler to tell us in plain language the a dependency was not met and which module(s) solve the dependencies.
>
> Justin P. Mattock
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20100904/ce50c9e4/attachment.bin
On 09/04/2010 06:24 AM, Dominick Grift wrote:
> On Sat, Sep 04, 2010 at 06:21:08AM -0700, Justin P. Mattock wrote:
>> On 09/04/2010 01:46 AM, Dominick Grift wrote:
>>> On Fri, Sep 03, 2010 at 08:18:55PM -0700, Justin Mattock wrote:
>>>> Im not sure what I need todo to make amanda happy with this:
>>>> sudo make load
>>>>
>>>> /usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
>>>> libsepol.print_missing_requirements: amanda's global requirements were
>>>> not met: type/attribute inetd_t (No such file or directory).
>>>> libsemanage.semanage_link_sandbox: Link packages failed (No such file
>>>> or directory).
>>>> /usr/sbin/semodule: Failed!
>>>> make: *** [load] Error 1
>>>>
>>>> do I need amanda and sandbox both working for this to work?
>>>
>>> Amanda's global requirements were not met. It has policy to interact with inetd_t but the type is not available:
>>>
>>> 1. is the inetd_t included (made available) in the amanda module?
>>> 2. is the xinetd policy installed?
>>
>> alright... disabling the build of this module, gets me going...
>> as for the xinetd I don't have that on the system, as well as amanda
>
> dependency issue. Ive mentioned issues like this on the IRC channel the other day.
> Refpolicy maintainer does not want to change it.
>
> We need semanage/compiler to tell us in plain language the a dependency was not met and which module(s) solve the dependencies.
>
well to just error out(i think) is not really a good idea(leaves users
in a panic)..maybe some
#ifdef AMANDA_XINE_STUFF
SELINUX_AMANDA_MODULE_NO_BUILDY
#endif
or even simpler a warning for this, but then again if somebody is
setting up a policy like this then adjusting the modules should be
something they do without even thinking about it(for the record I never
do...)
Justin P. Mattock
On 09/04/10 09:24, Dominick Grift wrote:
> On Sat, Sep 04, 2010 at 06:21:08AM -0700, Justin P. Mattock wrote:
>> On 09/04/2010 01:46 AM, Dominick Grift wrote:
>>> On Fri, Sep 03, 2010 at 08:18:55PM -0700, Justin Mattock wrote:
>>>> Im not sure what I need todo to make amanda happy with this:
>>>> sudo make load
>>>>
>>>> /usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
>>>> libsepol.print_missing_requirements: amanda's global requirements were
>>>> not met: type/attribute inetd_t (No such file or directory).
>>>> libsemanage.semanage_link_sandbox: Link packages failed (No such file
>>>> or directory).
>>>> /usr/sbin/semodule: Failed!
>>>> make: *** [load] Error 1
>>>>
>>>> do I need amanda and sandbox both working for this to work?
>>>
>>> Amanda's global requirements were not met. It has policy to interact with inetd_t but the type is not available:
>>>
>>> 1. is the inetd_t included (made available) in the amanda module?
>>> 2. is the xinetd policy installed?
>>
>> alright... disabling the build of this module, gets me going...
>> as for the xinetd I don't have that on the system, as well as amanda
>
> dependency issue. Ive mentioned issues like this on the IRC channel the other day.
> Refpolicy maintainer does not want to change it.
I want to clarify this. In the IRC channel we were talking about making
the evolution dependence on xserver optional, which I reject since
evolution doesn't work without X, so the policy should follow suit.
Does amanda work without inetd? If so, then it can be made optional in
the policy. If not, then it stays unconditional in the policy.
--
Chris PeBenito
<[email protected]>
Developer,
Hardened Gentoo Linux
On 09/04/2010 08:20 AM, Chris PeBenito wrote:
> On 09/04/10 09:24, Dominick Grift wrote:
>> On Sat, Sep 04, 2010 at 06:21:08AM -0700, Justin P. Mattock wrote:
>>> On 09/04/2010 01:46 AM, Dominick Grift wrote:
>>>> On Fri, Sep 03, 2010 at 08:18:55PM -0700, Justin Mattock wrote:
>>>>> Im not sure what I need todo to make amanda happy with this:
>>>>> sudo make load
>>>>>
>>>>> /usr/share/selinux/mcs/zebra.pp -i /usr/share/selinux/mcs/zosremote.pp
>>>>> libsepol.print_missing_requirements: amanda's global requirements were
>>>>> not met: type/attribute inetd_t (No such file or directory).
>>>>> libsemanage.semanage_link_sandbox: Link packages failed (No such file
>>>>> or directory).
>>>>> /usr/sbin/semodule: Failed!
>>>>> make: *** [load] Error 1
>>>>>
>>>>> do I need amanda and sandbox both working for this to work?
>>>>
>>>> Amanda's global requirements were not met. It has policy to interact with inetd_t but the type is not available:
>>>>
>>>> 1. is the inetd_t included (made available) in the amanda module?
>>>> 2. is the xinetd policy installed?
>>>
>>> alright... disabling the build of this module, gets me going...
>>> as for the xinetd I don't have that on the system, as well as amanda
>>
>> dependency issue. Ive mentioned issues like this on the IRC channel the other day.
>> Refpolicy maintainer does not want to change it.
>
> I want to clarify this. In the IRC channel we were talking about making
> the evolution dependence on xserver optional, which I reject since
> evolution doesn't work without X, so the policy should follow suit.
> Does amanda work without inetd? If so, then it can be made optional in
> the policy. If not, then it stays unconditional in the policy.
>
> --
> Chris PeBenito
> <[email protected]>
> Developer,
> Hardened Gentoo Linux
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
>
I've a seperate machine that I can test this out with(if need be)..
Looking at the dependencies with debian:
http://packages.debian.org/search?searchon=names&keywords=amanda
both the client/server use openbsd-inetd which dont use xinetd
but then again I see the "or" inet-superserver which looks like it does.
As for the error itself, I tried recreating this on both of my machines
and was unable to recreate this(even after git reset, and git
clean)prior too this was reliably re-creatable..
Justin P. Mattock