setools-1.5.1

setools-1.5.1

[James R. Marcus]

I tried updating my machine to setools-1.5.1 and it failed.
I had switch permissive mode and did emerge setools.
Here is my output:

make[1]: Leaving directory
`/var/tmp/portage/setools-1.5.1/work/setools-1.5.1/libseaudit'
cd libsefs; make libsefs libsefsso
env: tclsh: No such file or directory
env: tclsh: No such file or directory
make[1]: Entering directory
`/var/tmp/portage/setools-1.5.1/work/setools-1.5.1/libsefs'
gcc  -Wall -O2 -mcpu=i686 -fomit-frame-pointer -fforce-addr -fPIC
-DLIBSELINUX -I. -I../libapol -c fsdata.c
ar cr libsefs.a fsdata.o 
gcc   -shared -o libsefs.so.1.1 fsdata.o -Wl,-soname,libsefs.so.1 
make[1]: Leaving directory
`/var/tmp/portage/setools-1.5.1/work/setools-1.5.1/libsefs'
cd seuser; make seuser 
env: tclsh: No such file or directory
env: tclsh: No such file or directory
make[1]: Entering directory
`/var/tmp/portage/setools-1.5.1/work/setools-1.5.1/seuser'
gcc  -Wall -O2 -mcpu=i686 -fomit-frame-pointer -fforce-addr -fPIC
-DLIBSELINUX -DSEUSERCMD_VERSION_STRING='"1.3"' -c seuser_cmd.c
gcc  -o seuser seuser_cmd.o ../libseuser/libseuser.a
../libapol/libapol.a  -lfl -lm -lselinux
seuser_cmd.o(.text+0xdcb): In function `main':
: warning: the use of `tempnam' is dangerous, better use `mkstemp'
../libseuser/libseuser.a(seuser_db.o)(.text+0x196f): In function
`seuser_read_conf_info':
: undefined reference to `selinux_policy_root'
../libseuser/libseuser.a(seuser_db.o)(.text+0x19c9): In function
`seuser_read_conf_info':
: undefined reference to `selinux_policy_root'
../libseuser/libseuser.a(seuser_db.o)(.text+0x1a1f): In function
`seuser_read_conf_info':
: undefined reference to `selinux_policy_root'
../libseuser/libseuser.a(seuser_db.o)(.text+0x1a46): In function
`seuser_read_conf_info':
: undefined reference to `selinux_file_context_path'
../libapol/libapol.a(policy-io.o)(.text+0x85b): In function
`search_binary_policy_file':
: undefined reference to `selinux_binary_policy_path'
../libapol/libapol.a(policy-io.o)(.text+0x8c9): In function
`search_binary_policy_file':
: undefined reference to `selinux_binary_policy_path'
../libapol/libapol.a(policy-io.o)(.text+0xa0f): In function
`search_binary_policy_file':
: undefined reference to `selinux_binary_policy_path'
../libapol/libapol.a(policy-io.o)(.text+0xaf8): In function
`search_policy_src_file':
: undefined reference to `selinux_policy_root'
collect2: ld returned 1 exit status
make[1]: *** [seuser] Error 1
make[1]: Leaving directory
`/var/tmp/portage/setools-1.5.1/work/setools-1.5.1/seuser'
make: *** [seuser] Error 2
 
!!! ERROR: app-admin/setools-1.5.1 failed.
!!! Function src_compile, Line 66, Exitcode 2
!!! command line tools compile failed
!!! If you need support, post the topmost build error, NOT this status
message.
 
ftp root #

Thanks,
James



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: setools-1.5.1

[Stephen Smalley]

On Tue, 2005-03-29 at 11:49 -0500, James R. Marcus wrote:
> I tried updating my machine to setools-1.5.1 and it failed.
> I had switch permissive mode and did emerge setools.

Current version of setools is 2.0.  Your bug report is likely more
appropriate to gentoo-hardened, as it would appear to be specific to
Gentoo, right?

> `seuser_read_conf_info':
> : undefined reference to `selinux_policy_root'

Do you have libselinux >= 1.14?  That is what defines that function.
Current stable version is 1.22.

-- 
Stephen Smalley <sds@tycho.nsa.gov>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: setools-1.5.1

[James R. Marcus]

An 
emerge libselinux
and then
emerge setools
worked.
thanks,
James

-----Original Message-----
From: Stephen Smalley [mailto:sds@tycho.nsa.gov] 
Sent: Tuesday, March 29, 2005 12:04 PM
To: James R. Marcus
Cc: selinux@tycho.nsa.gov
Subject: Re: setools-1.5.1

On Tue, 2005-03-29 at 11:49 -0500, James R. Marcus wrote:
> I tried updating my machine to setools-1.5.1 and it failed.
> I had switch permissive mode and did emerge setools.

Current version of setools is 2.0.  Your bug report is likely more
appropriate to gentoo-hardened, as it would appear to be specific to
Gentoo, right?

> `seuser_read_conf_info':
> : undefined reference to `selinux_policy_root'

Do you have libselinux >= 1.14?  That is what defines that function.
Current stable version is 1.22.

-- 
Stephen Smalley <sds@tycho.nsa.gov>
National Security Agency




--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

RE: setools-1.5.1

[Karl MacMillan]

> -----Original Message-----
> From: owner-selinux@tycho.nsa.gov [mailto:owner-selinux@tycho.nsa.gov] On
> Behalf Of Stephen Smalley
> Sent: Tuesday, March 29, 2005 12:04 PM
> To: James R. Marcus
> Cc: selinux@tycho.nsa.gov
> Subject: Re: setools-1.5.1
> 
> On Tue, 2005-03-29 at 11:49 -0500, James R. Marcus wrote:
> > I tried updating my machine to setools-1.5.1 and it failed.
> > I had switch permissive mode and did emerge setools.
> 
> Current version of setools is 2.0.  Your bug report is likely more
> appropriate to gentoo-hardened, as it would appear to be specific to
> Gentoo, right?
> 
> > `seuser_read_conf_info':
> > : undefined reference to `selinux_policy_root'
> 
> Do you have libselinux >= 1.14?  That is what defines that function.
> Current stable version is 1.22.
> 

Just an FYI - setools only optionally depends on libselinux. If you want, for
example, to run apol on a non-selinux machine you can change the options in the
makefile to remove the libselinux dependency. It is on by default, however, and
obviously some of the tools (e.g., replcon) require libselinux.

Karl 

---
Karl MacMillan
Tresys Technology
http://www.tresys.com
(410) 290-1411 ext 134

> --
> Stephen Smalley <sds@tycho.nsa.gov>
> National Security Agency
> 
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: setools-1.5.1

[Joshua Brindle]

Karl MacMillan wrote:

>>-----Original Message-----
>>From: owner-selinux@tycho.nsa.gov [mailto:owner-selinux@tycho.nsa.gov] On
>>Behalf Of Stephen Smalley
>>Sent: Tuesday, March 29, 2005 12:04 PM
>>To: James R. Marcus
>>Cc: selinux@tycho.nsa.gov
>>Subject: Re: setools-1.5.1
>>
>>On Tue, 2005-03-29 at 11:49 -0500, James R. Marcus wrote:
>>    
>>
>>>I tried updating my machine to setools-1.5.1 and it failed.
>>>I had switch permissive mode and did emerge setools.
>>>      
>>>
>>Current version of setools is 2.0.  Your bug report is likely more
>>appropriate to gentoo-hardened, as it would appear to be specific to
>>Gentoo, right?
>>
>>    
>>
>>>`seuser_read_conf_info':
>>>: undefined reference to `selinux_policy_root'
>>>      
>>>
>>Do you have libselinux >= 1.14?  That is what defines that function.
>>Current stable version is 1.22.
>>
>>    
>>
>
>Just an FYI - setools only optionally depends on libselinux. If you want, for
>example, to run apol on a non-selinux machine you can change the options in the
>makefile to remove the libselinux dependency. It is on by default, however, and
>obviously some of the tools (e.g., replcon) require libselinux.
>  
>

Portage already handles libselinux as an optional dependancy and takes 
care of this for the user, the problem is that the 2.0 ebuild did not 
have the correct version of libselinux as a dependancy so there were 
missing symbols.

Joshua

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.