[Bug 200976] Review Request: cyphesis - WorldForge game server

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: cyphesis - WorldForge game server


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200976





------- Additional Comments From wart at kobold.org  2006-08-05 18:20 EST -------
(In reply to comment #17)
> (In reply to comment #15)
> > #14 - there should be a catch incase the user is not using selinux (I had it
> > turned off for this test)
> 
> What's this about? Are there problems building or installing on a system with
> SElinux disabled?
> 
> I don't have any such systems myself so I'd like to know, so that I can fix the
> SELinux policy module packaging guidelines document.

I believe this comes from the stderr of the semanage commands that I use to
define the port contexts for the application:

/usr/sbin/semanage port -a -t %{name}_port_t -p tcp 6767 || :

When the -selinux subpackage is installed on a system with selinux disabled,
then semanage will spit out error messages of the sort:

libsepol.context_from_record: MLS is enabled, but no MLS context found
libsepol.context_from_record: could not create context structure
libsepol.port_from_record: could not create port structure for range 6767:6767 (tcp)
libsepol.sepol_port_modify: could not load port range 6767 - 6767 (tcp)
libsemanage.dbase_policydb_modify: could not modify record value
libsemanage.semanage_base_merge_components: could not merge local modifications
into policy
/usr/sbin/semanage: Could not add port tcp/6767

Redirecting the output of semanage to /dev/null should silence these warnings.

The use of semanage isn't described in the selinux module guidelines, but
perhaps it should be, with a note to redirect stderr.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.