My machine:
# uname -r
2.6.18-92.el5
# cat /etc/redhat-release
CentOS release 5.2 (Final)
# yum list | grep selinux
libselinux.i386 1.33.4-5.el5 installed
libselinux.x86_64 1.33.4-5.el5 installed
libselinux-python.x86_64 1.33.4-5.el5 installed
selinux-policy.noarch 2.4.6-137.el5 installed
selinux-policy-targeted.noarch 2.4.6-137.el5 installed
I have such a statement in my myname.te
file:
optional {
require {
class capability setfcap;
}
allow myname_t self : capability setfcap;
}
And I get the error:
# checkmodule -M -m myname.te -o myname.mod ; semodule_package --module myname.mod --outfile myname.pp ; semodule -v --install myname.pp
checkmodule: loading policy configuration from myname.te
checkmodule: policy configuration loaded
checkmodule: writing binary representation (version 6) to myname.mod
Attempting to install module 'myname.pp':
Ok: return value of 0.
Committing changes:
libsepol.permission_copy_callback: Module myname depends on permission setfcap in class capability, not satisfied
libsemanage.semanage_link_sandbox: Link packages failed
semodule: Failed!
How can this be helped, please?
Asked by JenyaKh
(346 rep)
Jun 26, 2025, 05:00 AM