Return
-
Title
'vastool configure selinux' command fails -
Description
When running the 'vastool configure selinux' command you receive the following failure message:-------------------------------------------------------Adding vasd SELinux Policy ... Failed------------------------------------------------------- -
Cause
Dependencies for this command may not have been met.
Run the command again with the -d5 flag to enable debug output:# /opt/quest/bin/vastool -d5 configure selinux
Look for any dependency messages.E.g---------------------------------------------------------------------------------------------Missing /usr/share/selinux/devel/Makefile, dependencies not metMissing dependency: '/usr/share/selinux/devel/Makefile'---------------------------------------------------------------------------------------------
Also, on RHEL 6 QAS 4.2.1 a problem with the configuration script has been seen on some systems (defect #805417). -
Resolution
Resolution:
Ensure that all of the dependencies have been met before running the 'vastool configure selinux' command.
The following dependencies are taken from the README.md file for the selinux configuration script:
/opt/quest/libexec/vas/selinux/README.md-----------------------------------------------------------------------------Dependencies:* **RHEL 6 & equivalent** or higher+
* selinux-policy-devel (RHEL7) | selinux-policy (RHEL6) - NOTE the below dependencies are included in these packages.
* policycoreutils-python (audit2allow)* policycoreutils (semodule, restorecon)-----------------------------------------------------------------------------For RHEL 6 systems which have all all of the required dependencies, a workaround for defect #805417 is to edit this file:/opt/quest/libexec/vas/selinux/vasd.ifAnd comment out the two lines that match "vasd_use_starling(sshd_t)" and "class file { map };"