Description of problem: During compilation I get the following warnings: policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037: #line 21 allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690: allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override }; #line 26 policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490: allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override }; #line 34 policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977: #line 55 allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593: #line 57 allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121: #line 71 allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121: #line 75 allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772: allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override }; #line 78 policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647: #line 99 allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037: #line 21 allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690: allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override }; #line 26 policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490: allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override }; #line 34 policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977: #line 55 allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593: #line 57 allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121: #line 71 allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121: #line 75 allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772: allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override }; #line 78 policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647: #line 99 allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override }; Version-Release number of selected component (if applicable): Latest policy source (FC15) How reproducible: always Steps to Reproduce: 1. rpm -ivh selinux-policy-XXX 2. cd rpmbuild/SPECS 3. rpmbuild -bb selinux-policy.spec Actual results: policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037: #line 21 allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690: allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override }; #line 26 policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490: allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override }; #line 34 policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977: #line 55 allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593: #line 57 allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121: #line 71 allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121: #line 75 allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772: allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override }; #line 78 policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647: #line 99 allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":21:WARNING 'unrecognized character' at token '$' on line 11037: #line 21 allow postfix_bounce_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":26:WARNING 'unrecognized character' at token '$' on line 20690: allow postfix_cleanup_t $self:capability { setuid setgid sys_chroot dac_override }; #line 26 policy/modules/services/postfix.te":34:WARNING 'unrecognized character' at token '$' on line 30490: allow postfix_local_t $self:capability { setuid setgid sys_chroot dac_override }; #line 34 policy/modules/services/postfix.te":55:WARNING 'unrecognized character' at token '$' on line 50977: #line 55 allow postfix_pickup_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":57:WARNING 'unrecognized character' at token '$' on line 60593: #line 57 allow postfix_pipe_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":71:WARNING 'unrecognized character' at token '$' on line 89121: #line 71 allow postfix_qmgr_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":75:WARNING 'unrecognized character' at token '$' on line 108121: #line 75 allow postfix_smtp_t $self:capability { setuid setgid sys_chroot dac_override }; policy/modules/services/postfix.te":78:WARNING 'unrecognized character' at token '$' on line 117772: allow postfix_smtpd_t $self:capability { setuid setgid sys_chroot dac_override }; #line 78 policy/modules/services/postfix.te":99:WARNING 'unrecognized character' at token '$' on line 127647: #line 99 allow postfix_virtual_t $self:capability { setuid setgid sys_chroot dac_override }; Expected results: No warnings to be displayed Additional info: The above is caused by the following line in postfix.if (line 120): allow postfix_$1_t $self:capability { setuid setgid sys_chroot dac_override }; "$self" should be "self"
Fixed in selinux-policy-3.9.16-31.fc15
selinux-policy-3.9.16-31.fc15 has been submitted as an update for Fedora 15. https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-31.fc15
Package selinux-policy-3.9.16-32.fc15: * should fix your issue, * was pushed to the Fedora 15 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.9.16-32.fc15' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-32.fc15 then log in and leave karma (feedback).
selinux-policy-3.9.16-32.fc15 has been pushed to the Fedora 15 stable repository. If problems still persist, please make note of it in this bug report.