When building the SELinux module on RHEL 7: > [root@rhel7-vmware ~]# rpm -q selinux-policy{,-devel} > selinux-policy-3.12.1-153.el7_0.10.noarch > selinux-policy-devel-3.12.1-153.el7_0.10.noarch > [root@rhel7-vmware ~]# /opt/thinlinc/share/selinux/install > Updating default context mappings... > Updating guest_u context mappings... > Updating root context mappings... > Updating staff_u context mappings... > Updating sysadm_u context mappings... > Updating unconfined_u context mappings... > Updating user_u context mappings... > Updating xguest_u context mappings... > Compiling thinlinc policy module... > make: Entering directory `/tmp/tmpW4FR94' > Compiling targeted thinlinc module > thinlinc.te:126: Warning: mcs_killall() has been deprecated, please remove mcs_constrained() instead. > /usr/bin/checkmodule: loading policy configuration from tmp/thinlinc.tmp > /usr/bin/checkmodule: policy configuration loaded > /usr/bin/checkmodule: writing binary representation (version 17) to tmp/thinlinc.mod > Creating targeted thinlinc.pp policy package > rm tmp/thinlinc.mod tmp/thinlinc.mod.fc > make: Leaving directory `/tmp/tmpW4FR94' > Installing thinlinc policy module... > Fixing context on files... > [...]
Hopefully RHEL 6 has mcs_constrained(), and we should probably raise the minimum requirements to that some day soon.
We still get this deprecated message in RHEL 9. Should we do anything about this warning?
We've deprecated RHEL 6, so it's now possible to change the function here. But this fix would just be to silence the warning, so it's not a high-priority fix. We don't think the old function will be removed any time soon.