Problem making the kernel w/ the SELinux modules added

Problem making the kernel w/ the SELinux modules added

[Ryan Senior]

I am running Red Hat 7.1 and am attempting to compile the SELinux
additions into the kernel,  I get the following error message when it
gets to part of the SELinux section:

make[3]: Entering directory `/usr/src/selinux/module/selinux_plug/ss'
gcc -o checkpolicy ebitmap.cp.o queue.cp.o hashtab.cp.o symtab.cp.o
sidtab.cp.o avtab.cp.o policydb.cp.o services.cp.o y.tab.cp.o
lex.yy.cp.o checkpolicy.cp.o -lfl
/usr/bin/ld: cannot find -lfl
collect2: ld returned 1 exit status
make[3]: *** [checkpolicy] Error 1
make[3]: Leaving directory `/usr/src/selinux/module/selinux_plug/ss'
make[2]: *** [_subdir_ss] Error 2
make[2]: Leaving directory `/usr/src/selinux/module/selinux_plug'
make[1]: *** [_subdir_selinux_plug] Error 2
make[1]: Leaving directory `/usr/src/lsm/security'
make: *** [_dir_security] Error 2

Thanks,
Ryan


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem making the kernel w/ the SELinux modules added

[Conan Callen]

Ryan,

I got this same error. It happens when linux is compiled for the wrong
cpu. The default Processor Type is Pentium III, if you have an older
processor then this you need to specify your processor in config.

I had an old pentium, after selecting that (and recompiling) checkpolicy
ran without problems.

Conan

> I am running Red Hat 7.1 and am attempting to compile the SELinux
> additions into the kernel,  I get the following error message when it
> gets to part of the SELinux section:
>
> make[3]: Entering directory `/usr/src/selinux/module/selinux_plug/ss'
> gcc -o checkpolicy ebitmap.cp.o queue.cp.o hashtab.cp.o symtab.cp.o
> sidtab.cp.o avtab.cp.o policydb.cp.o services.cp.o y.tab.cp.o
> lex.yy.cp.o checkpolicy.cp.o -lfl
> /usr/bin/ld: cannot find -lfl
> collect2: ld returned 1 exit status
> make[3]: *** [checkpolicy] Error 1
> make[3]: Leaving directory `/usr/src/selinux/module/selinux_plug/ss'
> make[2]: *** [_subdir_ss] Error 2
> make[2]: Leaving directory `/usr/src/selinux/module/selinux_plug'
> make[1]: *** [_subdir_selinux_plug] Error 2
> make[1]: Leaving directory `/usr/src/lsm/security'
> make: *** [_dir_security] Error 2
>
> Thanks,
> Ryan
>
>
> --
> You have received this message because you are subscribed to the selinux list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
>



--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem making the kernel w/ the SELinux modules added

[Ryan Senior]

[-- Attachment #1: Type: text/plain, Size: 2018 bytes --]

I had that same problem (with the CPU's) earlier, because the default kernel in Red
Hat 7.1 defaults to PIII, but I have an AMD K62.  So when I would attempt to
compile, I would get similar errors to this.

So, I just keep telling it to make over and over, and eventually it finishes
compiling.  AMD K62 is specified on the new kernel, so I didn't know what the
problem could be.

/usr/bin/ld: cannot find -lfl
collect2: ld returned 1 exit status

That's the part of the error that tripped me up.

Thanks,
Ryan

Conan Callen wrote:

> Ryan,
>
> I got this same error. It happens when linux is compiled for the wrong
> cpu. The default Processor Type is Pentium III, if you have an older
> processor then this you need to specify your processor in config.
>
> I had an old pentium, after selecting that (and recompiling) checkpolicy
> ran without problems.
>
> Conan
>
> > I am running Red Hat 7.1 and am attempting to compile the SELinux
> > additions into the kernel,  I get the following error message when it
> > gets to part of the SELinux section:
> >
> > make[3]: Entering directory `/usr/src/selinux/module/selinux_plug/ss'
> > gcc -o checkpolicy ebitmap.cp.o queue.cp.o hashtab.cp.o symtab.cp.o
> > sidtab.cp.o avtab.cp.o policydb.cp.o services.cp.o y.tab.cp.o
> > lex.yy.cp.o checkpolicy.cp.o -lfl
> > /usr/bin/ld: cannot find -lfl
> > collect2: ld returned 1 exit status
> > make[3]: *** [checkpolicy] Error 1
> > make[3]: Leaving directory `/usr/src/selinux/module/selinux_plug/ss'
> > make[2]: *** [_subdir_ss] Error 2
> > make[2]: Leaving directory `/usr/src/selinux/module/selinux_plug'
> > make[1]: *** [_subdir_selinux_plug] Error 2
> > make[1]: Leaving directory `/usr/src/lsm/security'
> > make: *** [_dir_security] Error 2
> >
> > Thanks,
> > Ryan
> >
> >
> > --
> > You have received this message because you are subscribed to the selinux list.
> > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> > the words "unsubscribe selinux" without quotes as the message.
> >

[-- Attachment #2: Type: text/html, Size: 2248 bytes --]

Re: Problem making the kernel w/ the SELinux modules added

[Stephen Smalley]

On Mon, 5 Nov 2001, Ryan Senior wrote:

> I am running Red Hat 7.1 and am attempting to compile the SELinux
> additions into the kernel,  I get the following error message when it
> gets to part of the SELinux section:

> /usr/bin/ld: cannot find -lfl
> collect2: ld returned 1 exit status

'fl' refers to the flex library.  On my RedHat 7.1 systems, libfl.a is in
/usr/lib.

As a side note, the 2.4.14 kernel is out, so a new SELinux release
shouldn't be too far in the future.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem making the kernel w/ the SELinux modules added

[Stephen Smalley]

On Mon, 5 Nov 2001, Ryan Senior wrote:

> I am running Red Hat 7.1 and am attempting to compile the SELinux
> additions into the kernel,  I get the following error message when it
> gets to part of the SELinux section:
>
> make[3]: Entering directory `/usr/src/selinux/module/selinux_plug/ss'
> gcc -o checkpolicy ebitmap.cp.o queue.cp.o hashtab.cp.o symtab.cp.o
> sidtab.cp.o avtab.cp.o policydb.cp.o services.cp.o y.tab.cp.o
> lex.yy.cp.o checkpolicy.cp.o -lfl
> /usr/bin/ld: cannot find -lfl
> collect2: ld returned 1 exit status

By the way, the error that you are encountering is during the linking of
the checkpolicy program.  checkpolicy is a separate userspace program that
draws heavily from the security server sources (plus the policy scanner
and parser).  In the current release (and older releases), it lives in
the security server directory and is compiled during the kernel build,
but it has now been separated out in our internal tree and will be built
separately in future releases.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.