Policy module building on rawhide

Paul Howarth paul at city-fan.org
Wed Oct 22 11:45:27 UTC 2008


My module builds are failing on rawhide:

$ /usr/bin/make NAME=mls -f /usr/share/selinux/devel/Makefile
cat: /selinux/mls: No such file or directory
Compiling mls fastcgi module
m4: tmp/fastcgi.mod.role: No such file or directory
make: *** [tmp/fastcgi.mod] Error 1

The commands being run, according to "make -n" are:

$ make -n NAME=mls -f /usr/share/selinux/devel/Makefile
cat: /selinux/mls: No such file or directory
echo "Compiling mls fastcgi module"
test -d tmp || mkdir -p tmp
m4 -D enable_mls -D distro_redhat -D hide_broken_symptoms -D 
mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024 -s 
/usr/share/selinux/devel/include/support/all_perms.spt 
/usr/share/selinux/devel/include/support/file_patterns.spt 
/usr/share/selinux/devel/include/support/ipc_patterns.spt 
/usr/share/selinux/devel/include/support/loadable_module.spt 
/usr/share/selinux/devel/include/support/misc_macros.spt 
/usr/share/selinux/devel/include/support/misc_patterns.spt 
/usr/share/selinux/devel/include/support/mls_mcs_macros.spt 
/usr/share/selinux/devel/include/support/obj_perm_sets.spt 
tmp/all_interfaces.conf fastcgi.te tmp/fastcgi.mod.role > tmp/fastcgi.tmp
/usr/bin/checkmodule -M -m tmp/fastcgi.tmp -o tmp/fastcgi.mod
m4 -D enable_mls -D distro_redhat -D hide_broken_symptoms -D 
mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024 
/usr/share/selinux/devel/include/support/all_perms.spt 
/usr/share/selinux/devel/include/support/file_patterns.spt 
/usr/share/selinux/devel/include/support/ipc_patterns.spt 
/usr/share/selinux/devel/include/support/loadable_module.spt 
/usr/share/selinux/devel/include/support/misc_macros.spt 
/usr/share/selinux/devel/include/support/misc_patterns.spt 
/usr/share/selinux/devel/include/support/mls_mcs_macros.spt 
/usr/share/selinux/devel/include/support/obj_perm_sets.spt fastcgi.fc > 
tmp/fastcgi.mod.fc
echo "Creating mls fastcgi.pp policy package"
/usr/bin/semodule_package -o fastcgi.pp -m tmp/fastcgi.mod -f 
tmp/fastcgi.mod.fc
rm tmp/fastcgi.mod.fc tmp/fastcgi.mod

I'm guessing the missing .mod.role file would have been created by the 
commented-out rule in /usr/share/selinux/devel/include/Makefile:

tmp/%.mod: $(m4support) tmp/all_interfaces.conf %.te
	@$(EINFO) "Compiling $(NAME) $(basename $(@F)) module"
	@test -d $(@D) || mkdir -p $(@D)
#	$(call peruser-expansion,$(basename $(@F)),$@.role)
	$(verbose) $(M4) $(M4PARAM) -s $^ $@.role > $(@:.mod=.tmp)
	$(verbose) $(CHECKMODULE) -m $(@:.mod=.tmp) -o $@

Do I need to do something different for F10, or is this a bug?

Paul.




More information about the fedora-selinux-list mailing list