Problem about PAM-selinux

Problem about PAM-selinux

[Andy]

Hi, all,
I have a pam-selinux problem. I know I should post it to pam list, but
no response from them.

Things happened like this:
I want to upgrade my pam in Fedora Core 6,  when I make my
Linux-PAM-1.1.0, I encountered a error.

pam_selinux.c: In function `mls_range_allowed':
pam_selinux.c:239: error: `CONTEXT__CONTAINS' undeclared (first use in
this function)
pam_selinux.c:239: error: (Each undeclared identifier is reported only once
pam_selinux.c:239: error: for each function it appears in.)
pam_selinux.c:246: error: `SECCLASS_CONTEXT' undeclared (first use in
this function)

And I grep "CONTEXT__CONTAINS" in the whole Linux-PAM-1.1.0 source
code packet, nowhere defines it.
It seems to be some issues about selinux.
Anybody can give me a help ?  Thanks.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem about PAM-selinux

[Justin P. Mattock]

Andy wrote:
> Hi, all,
> I have a pam-selinux problem. I know I should post it to pam list, but
> no response from them.
>
> Things happened like this:
> I want to upgrade my pam in Fedora Core 6,  when I make my
> Linux-PAM-1.1.0, I encountered a error.
>
> pam_selinux.c: In function `mls_range_allowed':
> pam_selinux.c:239: error: `CONTEXT__CONTAINS' undeclared (first use in
> this function)
> pam_selinux.c:239: error: (Each undeclared identifier is reported only once
> pam_selinux.c:239: error: for each function it appears in.)
> pam_selinux.c:246: error: `SECCLASS_CONTEXT' undeclared (first use in
> this function)
>
> And I grep "CONTEXT__CONTAINS" in the whole Linux-PAM-1.1.0 source
> code packet, nowhere defines it.
> It seems to be some issues about selinux.
> Anybody can give me a help ?  Thanks.
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
>
>    
looks like an old *.h file somewhere
try updating all the SELinux packages,
(and kernel if need be)

Justin P. Mattock


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem about PAM-selinux

[Daniel J Walsh]

On 07/01/2009 01:04 AM, Justin P. Mattock wrote:
> Andy wrote:
>> Hi, all,
>> I have a pam-selinux problem. I know I should post it to pam list, but
>> no response from them.
>>
>> Things happened like this:
>> I want to upgrade my pam in Fedora Core 6, when I make my
>> Linux-PAM-1.1.0, I encountered a error.
>>
>> pam_selinux.c: In function `mls_range_allowed':
>> pam_selinux.c:239: error: `CONTEXT__CONTAINS' undeclared (first use in
>> this function)
>> pam_selinux.c:239: error: (Each undeclared identifier is reported only
>> once
>> pam_selinux.c:239: error: for each function it appears in.)
>> pam_selinux.c:246: error: `SECCLASS_CONTEXT' undeclared (first use in
>> this function)
>>
>> And I grep "CONTEXT__CONTAINS" in the whole Linux-PAM-1.1.0 source
>> code packet, nowhere defines it.
>> It seems to be some issues about selinux.
>> Anybody can give me a help ? Thanks.
>>
>> --
>> This message was distributed to subscribers of the selinux mailing list.
>> If you no longer wish to subscribe, send mail to
>> majordomo@tycho.nsa.gov with
>> the words "unsubscribe selinux" without quotes as the message.
>>
> looks like an old *.h file somewhere
> try updating all the SELinux packages,
> (and kernel if need be)
>
> Justin P. Mattock
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
> with
> the words "unsubscribe selinux" without quotes as the message.
CONTEXT__CONTAINS is defined in libselinux.  I think you need to update 
to a later version of libselinux.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem about PAM-selinux

[Justin P. Mattock]

Daniel J Walsh wrote:
> On 07/01/2009 01:04 AM, Justin P. Mattock wrote:
>> Andy wrote:
>>> Hi, all,
>>> I have a pam-selinux problem. I know I should post it to pam list, but
>>> no response from them.
>>>
>>> Things happened like this:
>>> I want to upgrade my pam in Fedora Core 6, when I make my
>>> Linux-PAM-1.1.0, I encountered a error.
>>>
>>> pam_selinux.c: In function `mls_range_allowed':
>>> pam_selinux.c:239: error: `CONTEXT__CONTAINS' undeclared (first use in
>>> this function)
>>> pam_selinux.c:239: error: (Each undeclared identifier is reported only
>>> once
>>> pam_selinux.c:239: error: for each function it appears in.)
>>> pam_selinux.c:246: error: `SECCLASS_CONTEXT' undeclared (first use in
>>> this function)
>>>
>>> And I grep "CONTEXT__CONTAINS" in the whole Linux-PAM-1.1.0 source
>>> code packet, nowhere defines it.
>>> It seems to be some issues about selinux.
>>> Anybody can give me a help ? Thanks.
>>>
>>> -- 
>>> This message was distributed to subscribers of the selinux mailing 
>>> list.
>>> If you no longer wish to subscribe, send mail to
>>> majordomo@tycho.nsa.gov with
>>> the words "unsubscribe selinux" without quotes as the message.
>>>
>> looks like an old *.h file somewhere
>> try updating all the SELinux packages,
>> (and kernel if need be)
>>
>> Justin P. Mattock
>>
>>
>> -- 
>> This message was distributed to subscribers of the selinux mailing list.
>> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
>> with
>> the words "unsubscribe selinux" without quotes as the message.
> CONTEXT__CONTAINS is defined in libselinux.  I think you need to 
> update to a later version of libselinux.
>
Here is the address to the SELinux userpsace project:
http://userspace.selinuxproject.org/trac/wiki/Releases
you can either compile the .tar.balls
or in the search bar type "git" to
use the git interface(preferred approach).

Justin P. Mattock

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Problem about PAM-selinux

[Stephen Smalley]

On Wed, 2009-07-01 at 12:09 +0800, Andy wrote:
> Hi, all,
> I have a pam-selinux problem. I know I should post it to pam list, but
> no response from them.
> 
> Things happened like this:
> I want to upgrade my pam in Fedora Core 6,  when I make my
> Linux-PAM-1.1.0, I encountered a error.
> 
> pam_selinux.c: In function `mls_range_allowed':
> pam_selinux.c:239: error: `CONTEXT__CONTAINS' undeclared (first use in
> this function)
> pam_selinux.c:239: error: (Each undeclared identifier is reported only once
> pam_selinux.c:239: error: for each function it appears in.)
> pam_selinux.c:246: error: `SECCLASS_CONTEXT' undeclared (first use in
> this function)
> 
> And I grep "CONTEXT__CONTAINS" in the whole Linux-PAM-1.1.0 source
> code packet, nowhere defines it.
> It seems to be some issues about selinux.
> Anybody can give me a help ?  Thanks.

Fedora Core 6 is ancient and unsupported.  Considered updating to a
shiny new Fedora 11?

Regardless, you'd need a new version of libselinux if you were to build
a newer version of pam_selinux.  And all the rest of the SELinux
userland.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.