Re: [gentoo-hardened] problem, Could not access sandbox base file

[John Huttley]

Hi,

I've got this....

# semodule -B
libsemanage.semanage_link_sandbox: Could not access sandbox base file 
/etc/selinux/strict/modules/tmp/base.pp.
semodule:  Failed!

.. problem also.

However I have not been able to get it work in the manner described below..
I'm using the selinux/2006.1 policy with a 2.6.20-hardened-r5  kernel.

Does anyone have any other suggestions?

--john




Łukasz Sochanowski - Shipmedics wrote:
> it work thanks a lot
>
> --
> Łukasz Sochanowski
> IT Manager
>
> mobile: [phone]
> email: lukasz.sochanowski@××××××××××.com
> IT Division email: it@××××××××××.com
> IT Division tel.: [phone]
> IT Division fax: [phone]
> SHIPMEDICS Ltd 24/7 Customer support hotline:
> +48 888 MEDICS ([phone])
>
> *********************************************
> SHIPMEDICS Ltd.
> ul. Wisniowa 34a
> 71-496 Szczecin; POLAND
> tel.: [phone]
> fax:  [phone]
> email: shipmedics@××××××××××.com
> www.shipmedics.com
>
> VAT No./NIP: PL8512897664
> REGON: 812742693
> Capital/Kapital zakladowy: 125 000 PLN
> Court Name/Sad Rejestrowy:
> District Court in Szczecin/Sad Rejonowy w Szczecinie XVII Commercial Division of the National Court Register/ XVII Wydzial Gospodarczy Krajowego Rejestru Sadowego KRS Registration No./KRS: 0000226629
> *********************************************
>
> This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this e-mail in error, please destroy this message and kindly notify the sender by reply e-mail.
>
>
>
> -----Original Message-----
> From: Petre Rodan [mailto:kaiowas@g.o]
> Sent: Tuesday, July 10, 2007 12:36 PM
> To: gentoo-hardened@l.g.o
> Subject: Re: [gentoo-hardened] problem
>
>
> Hi,
>
> On Tue, Jul 10, 2007 at 11:35:31AM +0200, Łukasz Sochanowski - Shipmedics wrote:
>
>> Hi,
>>
>> I have a problem concerning SElinux on gentoo.
>> I`ve installed selinux from profile 2007.0 with managed policy, but
>> when I try to load or reload modules, a problem emerges:
>>
>> # semodule -B
>> libsemanage.semanage_link_sandbox: Could not access sandbox base file
>> /etc/selinux/strict/modules/tmp/base.pp.
>> semodule:  Failed!
>>
>> # emerge selinux-base-policy
>>  * Inserting base module into strict module store.
>> libsemanage.semanage_exec_prog: Child process /usr/sbin/load_policy
>> did not exit cleanly.
>> libsemanage.semanage_reload_policy: load_policy returned error code -1..
>> libsemanage.semanage_install_active: Could not copy
>> /etc/selinux/strict/modules/active/policy.kern to
>> /etc/selinux/strict/policy/policy.21.
>> semodule:  Failed!
>>  * Inserting base module into targeted module store.
>> libsemanage.semanage_exec_prog: Child process /sbin/setfiles did not
>> exit cleanly.
>> libsemanage.semanage_install_active: setfiles returned error code -1.
>> libsemanage.semanage_install_active: Could not copy
>> /etc/selinux/targeted/modules/active/policy.kern to
>> /etc/selinux/targeted/policy/policy.21.
>> semodule:  Failed!
>>
>
> sounds like http://bugs.gentoo.org/show_bug.cgi?id=184520
>
> try to emerge portage-2.1.2.2 and then re-emerge your base-policy
>
>
>
>> I really don`t know what to do now. Can someone help me fix this ?
>>
>> Regards
>>
>> max239
>>
>> --
>> gentoo-hardened@g.o mailing list
>>
>
> cheers,
> peter
>
> --
> petre rodan
> <kaiowas@g.o>
> Developer,
> Hardened Gentoo Linux
>
>