Re: default policy package

[Howard Holm <hdholm@epoch.ncsc.mil>]

On Mon, 2003-11-03 at 14:27, Colin Walters wrote:
> On Mon, 2003-11-03 at 11:48, Russell Coker wrote:
> 
> > Thanks for that reference, I have run check-all and fixed bugs in my policy 
> > tree related to updfstab, kudzu, and netsaint.  Colin, I have found what 
> > appears to be a minor bug in check-all, I get the following error related to 
> > mount:
> > 
> > Testing authbind.te...
> > Testing authbind.te...success.
> > make[1]: *** No rule to make target `presymlink/mount.te', needed by 
> > `presymlink/automount.te'.  Stop.
> 
> This is due to the fact that automount.te has a Depends: mount.te, but
> this is unnecessary since mount.te is included in the core
> (non-optional) policy.  Deleting that Depends: line should make it work.
> I'll try to come up with a patch soonish to make Depends: on core policy
> work though.

The Depends line has been fixed for a while (at least since the last
release) in the example policy at nsa.gov.  I've been using make
check-all for a while.  It's very useful, but it has some strange
behaviors.  I've noticed that often I can run check-all on a broken
policy and it will run fine.  Running it a second or third time will
cause the error to be generated.  Running make checkunused/file.te seems
to work in a more deterministic way.  I haven't had a chance to try and
track down the problem with check-all though.

-- 
Howard Holm <hdholm@epoch.ncsc.mil>
Office of Defensive Computing Research
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.