Bug #18284
closedforeman-selinux is conflicting with container-selinux
Description
Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1414821
Description of problem:
foreman-selinux is conflicting with container-selinux
If you install foreman-selinux first then container-selinux module load fails and vice-versa. If you install container-selinux first then foreman-selinux module load fails.
Version-Release number of selected component (if applicable):
@Sat6.2.7
(generally all sat version, but lets stick to 6.2)
foreman-selinux-1.11.0.2-1.el7sat
How reproducible:
Always on RHEL7.3
Steps to Reproduce:
1. Install docker (with its container-selinux)
2. Install Satellite (with its foreman-selinux)
- yum install foreman-selinux
...
Re-declaration of type docker_port_t <<< this is the issue
Failed to create node
Bad type declaration at /etc/selinux/targeted/tmp/modules/400/foreman/cil:27
OSError: Error
ValueError: Type elasticsearch_port_t is invalid, must be a port type
warning: %post(foreman-selinux-1.11.0.2-1.el7sat.noarch) scriptlet failed, exit status 1
Non-fatal POSTIN scriptlet failure in rpm package foreman-selinux-1.11.0.2-1.el7sat.noarch
- semanage fcontext -l | grep foreman
/opt/theforeman/tfm/root = /
all? most? of foreman selinux types are missing due to conflict
Actual results:
conflicting selinux modules
Expected results:
modules are able to cope together