Bug 716648

Summary: postfix.te warning during compilation - 'unrecognized character'
Product: [Fedora] Fedora Reporter: Mr-4 <mr.dash.four>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: dominick.grift, dwalsh, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: selinux-policy-3.9.16-32.fc15 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-07-08 18:11:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mr-4 2011-06-26 00:58:46 UTC
Description of problem:
During compilation I get the following warnings:

policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037:
#line 21
	allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690:
	allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override };
#line 26
policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490:
	allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override };
#line 34
policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977:
#line 55
	allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593:
#line 57
	allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121:
#line 71
	allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121:
#line 75
	allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772:
	allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override };
#line 78
policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647:
#line 99
	allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037:
#line 21
	allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690:
	allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override };
#line 26
policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490:
	allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override };
#line 34
policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977:
#line 55
	allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593:
#line 57
	allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121:
#line 71
	allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121:
#line 75
	allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772:
	allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override };
#line 78
policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647:
#line 99
	allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override };


Version-Release number of selected component (if applicable):
Latest policy source (FC15)

How reproducible:
always

Steps to Reproduce:
1. rpm -ivh selinux-policy-XXX
2. cd rpmbuild/SPECS
3. rpmbuild -bb selinux-policy.spec
  
Actual results:
policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037:
#line 21
	allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690:
	allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override };
#line 26
policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490:
	allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override };
#line 34
policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977:
#line 55
	allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593:
#line 57
	allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121:
#line 71
	allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121:
#line 75
	allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772:
	allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override };
#line 78
policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647:
#line 99
	allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037:
#line 21
	allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690:
	allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override };
#line 26
policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490:
	allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override };
#line 34
policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977:
#line 55
	allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593:
#line 57
	allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121:
#line 71
	allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121:
#line 75
	allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override };
policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772:
	allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override };
#line 78
policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647:
#line 99
	allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override };


Expected results:
No warnings to be displayed

Additional info:
The above is caused by the following line in postfix.if (line 120):
allow postfix_$1_t $self:capability { setuid setgid sys_chroot dac_override };

"$self" should be "self"

Comment 1 Daniel Walsh 2011-06-26 11:25:19 UTC
Fixed in selinux-policy-3.9.16-31.fc15

Comment 2 Fedora Update System 2011-06-30 15:59:24 UTC
selinux-policy-3.9.16-31.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-31.fc15

Comment 3 Fedora Update System 2011-07-01 18:55:53 UTC
Package selinux-policy-3.9.16-32.fc15:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.9.16-32.fc15'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-32.fc15
then log in and leave karma (feedback).

Comment 4 Fedora Update System 2011-07-08 18:10:06 UTC
selinux-policy-3.9.16-32.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.