Policy module building on rawhide

Stephen Smalley sds at tycho.nsa.gov
Wed Oct 22 12:58:11 UTC 2008


On Wed, 2008-10-22 at 12:45 +0100, Paul Howarth wrote:
> My module builds are failing on rawhide:
> 
> $ /usr/bin/make NAME=mls -f /usr/share/selinux/devel/Makefile

Why NAME=mls?

> cat: /selinux/mls: No such file or directory

ls /selinux shows what?
grep selinux /proc/mounts /proc/filesystems

> Compiling mls fastcgi module
> m4: tmp/fastcgi.mod.role: No such file or directory
> make: *** [tmp/fastcgi.mod] Error 1
> 
> The commands being run, according to "make -n" are:
> 
> $ make -n NAME=mls -f /usr/share/selinux/devel/Makefile
> cat: /selinux/mls: No such file or directory
> echo "Compiling mls fastcgi module"
> test -d tmp || mkdir -p tmp
> m4 -D enable_mls -D distro_redhat -D hide_broken_symptoms -D 
> mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024 -s 
> /usr/share/selinux/devel/include/support/all_perms.spt 
> /usr/share/selinux/devel/include/support/file_patterns.spt 
> /usr/share/selinux/devel/include/support/ipc_patterns.spt 
> /usr/share/selinux/devel/include/support/loadable_module.spt 
> /usr/share/selinux/devel/include/support/misc_macros.spt 
> /usr/share/selinux/devel/include/support/misc_patterns.spt 
> /usr/share/selinux/devel/include/support/mls_mcs_macros.spt 
> /usr/share/selinux/devel/include/support/obj_perm_sets.spt 
> tmp/all_interfaces.conf fastcgi.te tmp/fastcgi.mod.role > tmp/fastcgi.tmp
> /usr/bin/checkmodule -M -m tmp/fastcgi.tmp -o tmp/fastcgi.mod
> m4 -D enable_mls -D distro_redhat -D hide_broken_symptoms -D 
> mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024 
> /usr/share/selinux/devel/include/support/all_perms.spt 
> /usr/share/selinux/devel/include/support/file_patterns.spt 
> /usr/share/selinux/devel/include/support/ipc_patterns.spt 
> /usr/share/selinux/devel/include/support/loadable_module.spt 
> /usr/share/selinux/devel/include/support/misc_macros.spt 
> /usr/share/selinux/devel/include/support/misc_patterns.spt 
> /usr/share/selinux/devel/include/support/mls_mcs_macros.spt 
> /usr/share/selinux/devel/include/support/obj_perm_sets.spt fastcgi.fc > 
> tmp/fastcgi.mod.fc
> echo "Creating mls fastcgi.pp policy package"
> /usr/bin/semodule_package -o fastcgi.pp -m tmp/fastcgi.mod -f 
> tmp/fastcgi.mod.fc
> rm tmp/fastcgi.mod.fc tmp/fastcgi.mod
> 
> I'm guessing the missing .mod.role file would have been created by the 
> commented-out rule in /usr/share/selinux/devel/include/Makefile:
> 
> tmp/%.mod: $(m4support) tmp/all_interfaces.conf %.te
> 	@$(EINFO) "Compiling $(NAME) $(basename $(@F)) module"
> 	@test -d $(@D) || mkdir -p $(@D)
> #	$(call peruser-expansion,$(basename $(@F)),$@.role)
> 	$(verbose) $(M4) $(M4PARAM) -s $^ $@.role > $(@:.mod=.tmp)
> 	$(verbose) $(CHECKMODULE) -m $(@:.mod=.tmp) -o $@
> 
> Do I need to do something different for F10, or is this a bug?
> 
> Paul.
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
-- 
Stephen Smalley
National Security Agency




More information about the fedora-selinux-list mailing list