From: Wolfgang Pfeiffer <roto@gmx.net>
To: SE-Linux <selinux@tycho.nsa.gov>
Subject: Building SE-ssh. Result: fakeroot: Permission denied
Date: Fri, 30 Jul 2004 13:42:46 +0200 [thread overview]
Message-ID: <1091187766.18595.153.camel@debby> (raw)
Hi All
I can't build ssh as *non-root* from SE sources from
http://selinux.lemuria.org/newselinux/ssh/
I get a "permission denied" if I try to do this.
ls -l `which gcc`
lrwxrwxrwx 1 root root 8 Jul 28 00:24 /usr/bin/gcc -> gcc-2.95
No problem to build non-SE-sources, patched with SE-files like that:
./ssh.debiansources.sh > ssh.debiansources.log
Here's ssh.debiansources.sh:
#########################################
#!/bin/sh -x
/bin/sh -n $HOME/ssh.debiansources.sh && \
cd $HOME/test/ && \
rm -rf * && \
apt-get source openssh && \
cd openssh-3.8.1p1/ && \
cp $HOME/russellpackages/ssh/openssh-selinux.patch.gz* . && \
gpg --verify openssh-selinux.patch.gz.sign openssh-selinux.patch.gz && \
gzip -cd openssh-selinux.patch.gz | patch -p1 && \
autoconf && \
fakeroot debian/rules binary
#########################################
The problem with the .debs resulting from the script above is that
they're standard, non-SE packages, IINM:
openssh-client-udeb_3.8.1p1-7_powerpc.udeb
openssh-server-udeb_3.8.1p1-7_powerpc.udeb
ssh-askpass-gnome_3.8.1p1-7_powerpc.deb
ssh_3.8.1p1-7_powerpc.deb
Second try, this time using SE sources:
I run the following ssh.getandbuild.sh script for the SE-build like
that:
./ssh.getandbuild.sh &> ssh.log
ssh.getandbuild.sh:
#######################################################
#!/bin/sh -x
/bin/sh -n $HOME/ssh.getandbuild.sh && \
cd $HOME/test/ && \
rm -rf * && \
curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh_3.8.1p1.orig.tar.gz && \
curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh-selinux.patch.gz && \
curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh-selinux.patch.gz.sign && \
curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh_3.8.1p1-7.se1.diff.gz && \
tar -xzvf *\.tar.gz && \
cd openssh-3.8.1p1/ && \
cp ../openssh_3.8.1p1-7.se1.diff.gz . && \
gzip -cd openssh_3.8.1p1-7.se1.diff.gz | patch -p1 && \
autoconf && \
fakeroot debian/rules binary
####################################################
The script above, according to the ssh.log log file, ends like that:
+ autoconf
+ fakeroot debian/rules binary
/usr/bin/fakeroot: line 146: debian/rules: Permission denied
ssh.log, in nearly all its beauty:
################################
+ /bin/sh -n /home/shorty/ssh.getandbuild.sh
+ cd /home/shorty/test/
+ rm -rf openssh-3.8.1p1 openssh-client-udeb_3.8.1p1-7_powerpc.udeb openssh-server-udeb_3.8.1p1-7_powerpc.udeb openssh_3.8.1p1-7.diff.gz openssh_3.8.1p1-7.dsc openssh_3.8.1p1.orig.tar.gz ssh-askpass-gnome_3.8.1p1-7_powerpc.deb ssh_3.8.1p1-7_powerpc.deb
+ curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh_3.8.1p1.orig.tar.gz
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 777k 0 1091 0 0 204 0 1:05:01 0:00:05 1:04:56 204
11 777k 11 93571 0 0 15153 0 0:00:52 0:00:06 0:00:46 107k
27 777k 27 210k 0 0 30104 0 0:00:26 0:00:07 0:00:19 113k
42 777k 42 330k 0 0 41400 0 0:00:19 0:00:08 0:00:11 115k
57 777k 57 449k 0 0 50226 0 0:00:15 0:00:09 0:00:06 116k
73 777k 73 569k 0 0 57325 0 0:00:13 0:00:10 0:00:03 117k
88 777k 88 689k 0 0 63154 0 0:00:12 0:00:11 0:00:01 119k
100 777k 100 777k 0 0 66833 0 0:00:11 0:00:11 --:--:-- 119k
+ curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh-selinux.patch.gz
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
50 2005 50 1076 0 0 3375 0 --:--:-- --:--:-- --:--:-- 3375
100 2005 100 2005 0 0 6203 0 --:--:-- --:--:-- --:--:-- 226k
+ curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh-selinux.patch.gz.sign
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 265 100 265 0 0 839 0 --:--:-- --:--:-- --:--:-- 839
100 265 100 265 0 0 828 0 --:--:-- --:--:-- --:--:-- 0
+ curl -f -O http://selinux.lemuria.org/newselinux/ssh/openssh_3.8.1p1-7.se1.diff.gz
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 226k 0 1098 0 0 3481 0 0:01:06 --:--:-- 0:01:06 3481
8 226k 8 18778 0 0 33838 0 0:00:06 --:--:-- 0:00:06 73666
60 226k 60 137k 0 0 90851 0 0:00:02 0:00:01 0:00:01 110k
100 226k 100 226k 0 0 98k 0 0:00:02 0:00:02 --:--:-- 113k
+ tar -xzvf openssh_3.8.1p1.orig.tar.gz
openssh-3.8.1p1/
openssh-3.8.1p1/.cvsignore
[ .... removed ... ]
openssh-3.8.1p1/ssh-keysign.0
openssh-3.8.1p1/sshd_config.0
openssh-3.8.1p1/ssh_config.0
openssh-3.8.1p1/stamp-h.in
+ cd openssh-3.8.1p1/
+ cp ../openssh_3.8.1p1-7.se1.diff.gz .
+ gzip -cd openssh_3.8.1p1-7.se1.diff.gz
+ patch -p1
patching file .cvsignore
patching file Makefile.in
patching file auth-pam.c
patching file clientloop.c
patching file config.guess
patching file config.sub
patching file configure.ac
patching file entropy.c
patching file log.c
patching file log.h
patching file monitor_fdpass.c
patching file packet.c
patching file packet.h
patching file readconf.c
patching file readconf.h
patching file serverloop.c
patching file session.c
patching file ssh-keyscan.c
patching file ssh.1
patching file ssh.c
patching file ssh_config
patching file ssh_config.5
patching file sshconnect.c
patching file sshd.8
patching file sshd.c
patching file sshpty.c
patching file version.h
patching file contrib/ssh-copy-id
patching file contrib/redhat/sshd.init
patching file contrib/.cvsignore
patching file scard/.cvsignore
patching file config.h.in
patching file configure
patching file debian/po/it.po
patching file debian/po/POTFILES.in
patching file debian/po/da.po
patching file debian/po/de.po
patching file debian/po/es.po
patching file debian/po/fr.po
patching file debian/po/ja.po
patching file debian/po/nl.po
patching file debian/po/pl.po
patching file debian/po/pt_BR.po
patching file debian/po/ru.po
patching file debian/po/templates.pot
patching file debian/po/ca.po
patching file debian/po/el.po
patching file debian/po/tr.po
patching file debian/po/cs.po
patching file debian/po/zh_CN.po
patching file debian/.cvsignore
patching file debian/README.Debian
patching file debian/changelog
patching file debian/conffiles
patching file debian/config
patching file debian/control
patching file debian/copyright.head
patching file debian/dirs
patching file debian/gnome-ssh-askpass.1
patching file debian/init
patching file debian/moduli.5
patching file debian/postinst
patching file debian/postrm
patching file debian/preinst
patching file debian/prerm
patching file debian/rules
patching file debian/ssh-argv0
patching file debian/ssh-argv0.1
patching file debian/ssh-askpass-gnome.copyright
patching file debian/ssh-askpass-gnome.dirs
patching file debian/ssh-askpass-gnome.postinst
patching file debian/ssh-askpass-gnome.prerm
patching file debian/ssh.default
patching file debian/ssh.pam
patching file debian/templates.master
patching file debian/postrm.debhelper
patching file debian/substvars
patching file debian/openssh-client-udeb.isinstallable
patching file debian/openssh-client-udeb.dirs
patching file debian/templates
patching file debian/openssh-server-udeb.dirs
patching file debian/ssh-askpass-gnome.desktop
patching file debian/ssh-askpass-gnome.png.uue
+ autoconf
+ fakeroot debian/rules binary
/usr/bin/fakeroot: line 146: debian/rules: Permission denied
################################################################
Was it my mistake?
Thanks in anticipation
Wolfgang
--
Profile, links: http://profiles.yahoo.com/wolfgangpfeiffer
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next reply other threads:[~2004-07-30 11:42 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-07-30 11:42 Wolfgang Pfeiffer [this message]
2004-07-30 11:48 ` Building SE-ssh. Result: fakeroot: Permission denied Wolfgang Pfeiffer
2004-07-30 13:15 ` Erich Schubert
2004-07-30 19:53 ` Wolfgang Pfeiffer
2004-07-30 22:08 ` Luke Kenneth Casson Leighton
2004-07-30 15:23 ` Colin Walters
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1091187766.18595.153.camel@debby \
--to=roto@gmx.net \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.