broken interface: userdom_common_user_template

broken interface: userdom_common_user_template

[Michael C Thompson]

So I am seeing a broken interface problem in policy package version 
selinux-policy-2.4.3-8.

The problem is as follows:

# make
Compiling strict abat module
/usr/bin/checkmodule:  loading policy configuration from tmp/abat.tmp
abat.te:49:ERROR 'unknown class context used in rule' at token ';' on 
line 82511:
#line 49
         allow abat_t self:context contains;
/usr/bin/checkmodule:  error(s) encountered while parsing configuration
make: *** [tmp/abat.mod] Error 1

Line 49: userdom_admin_user_template(abat)

Tracking down the interface that actually has the problem yeilds: 
userdom_common_user_template

I don't know enough about the (apparently depricated or renamed) context 
class to fix this, but I imagine commenting it out isn;t the ideal solution.

Any advice while I await the new package?

Thanks,
Mike


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: broken interface: userdom_common_user_template

[Christopher J. PeBenito]

On Fri, 2006-11-10 at 16:01 -0600, Michael C Thompson wrote:
> So I am seeing a broken interface problem in policy package version 
> selinux-policy-2.4.3-8.
> 
> The problem is as follows:
> 
> # make
> Compiling strict abat module
> /usr/bin/checkmodule:  loading policy configuration from tmp/abat.tmp
> abat.te:49:ERROR 'unknown class context used in rule' at token ';' on 
> line 82511:
> #line 49
>          allow abat_t self:context contains;
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> make: *** [tmp/abat.mod] Error 1
> 
> Line 49: userdom_admin_user_template(abat)

You need to add this to it's gen_require():

class context contains;

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.