Sample Header Ad - 728x90

Selinux statement optional does not work on Centos 5.2

0 votes
0 answers
17 views
My machine:
# uname -r
2.6.18-92.el5

# cat /etc/redhat-release
CentOS release 5.2 (Final)

# yum list | grep selinux
libselinux.i386                          1.33.4-5.el5           installed
libselinux.x86_64                        1.33.4-5.el5           installed
libselinux-python.x86_64                 1.33.4-5.el5           installed
selinux-policy.noarch                    2.4.6-137.el5          installed
selinux-policy-targeted.noarch           2.4.6-137.el5          installed
I have such a statement in my myname.te file:
optional {
    require {
        class capability setfcap;
    }

    allow myname_t self : capability setfcap;
}
And I get the error:
# checkmodule -M -m  myname.te  -o myname.mod ; semodule_package --module myname.mod --outfile myname.pp ; semodule -v --install myname.pp
checkmodule:  loading policy configuration from myname.te
checkmodule:  policy configuration loaded
checkmodule:  writing binary representation (version 6) to myname.mod
Attempting to install module 'myname.pp':
Ok: return value of 0.
Committing changes:
libsepol.permission_copy_callback: Module myname depends on permission setfcap in class capability, not satisfied
libsemanage.semanage_link_sandbox: Link packages failed
semodule:  Failed!
How can this be helped, please?
Asked by JenyaKh (346 rep)
Jun 26, 2025, 05:00 AM