Troubleshooting

Known issues

Collision with other SELinux labels

selcraft automatically generates SELinux file labels and applies them to the specified files or directories. Since other RPM packages might specify labels for the same resource, this might lead to errors on installation. For example, the QM project assigns a label to the /run/ipc/ directory:

# Part of qm.te
...
/run/ipc(/.*)?  gen_context(system_u:object_r:ipc_var_run_t,s0)
...

If selcraft is used to generate a policy containing a label for a nested file or directory, /run/ipc/myapp for example, this will cause errors. In order to avoid this, make sure that the resource in the selcraft policy configuration does not conflict with a label from another package.