[DSE-Dev] refpolicy REMOVED from testing

Andreas Kuckartz a.kuckartz at ping.de
Thu Oct 31 17:39:42 UTC 2013

Mika Pflüger:
>> You already have a default policy installed. I am leaving it
>> alone. Please check and update manually.
> That is normal for debian selinux policy upgrades and has been for
> the last years. You need to run selinux-policy-upgrade(8) to
> activate the new policy.

I executed selinux-policy-upgrade using sudo with this result:

Updating "default" policy
libsepol.permission_copy_callback: Module epmd depends on permission
status in class system, not satisfied (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file
or directory).
semodule:  Failed!

> If this is good design can be discussed (and especially I think the
> message could advertise selinux-policy-upgrade directly instead of
> letting the user figure that bit out themselves).

Yes, I think that it the user should be offered to execute it at the
end of the installation.

> From looking at the headers of your mail (which arrived at my
> inbox only via your direct mail, not via the lists), I'd think that
> the tor-relay might be what causes debian mailing list servers to
> reject your mail.

Thanks a *lot* for that hint!


More information about the SELinux-devel mailing list