From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea01.nsa.gov (msux-gh1-uea01.nsa.gov [63.239.67.1]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n6TB5LxJ032244 for ; Wed, 29 Jul 2009 07:05:21 -0400 Received: from ey-out-1920.google.com (localhost [127.0.0.1]) by msux-gh1-uea01.nsa.gov (8.12.10/8.12.10) with ESMTP id n6TB4t8W015784 for ; Wed, 29 Jul 2009 11:04:56 GMT Received: by ey-out-1920.google.com with SMTP id 3so156499eyh.30 for ; Wed, 29 Jul 2009 04:05:19 -0700 (PDT) MIME-Version: 1.0 Date: Wed, 29 Jul 2009 15:35:19 +0430 Message-ID: Subject: compiling errors! From: mina elnino To: selinux@tycho.nsa.gov Content-Type: multipart/mixed; boundary=0016e6d99eadab98b7046fd62954 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov --0016e6d99eadab98b7046fd62954 Content-Type: multipart/alternative; boundary=0016e6d99eadab98b1046fd62952 --0016e6d99eadab98b1046fd62952 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit dear list; i'd like to make some changes in checkpolicy package according to a project in my college. so i clone the git repo and "make install". $ git clone http://oss.tresys.com/git/selinux.git $ cd selinux $ make DESTDIR=~/obj install but it makes some errors, which i have attached them (in result file). i have to say that my os is fc11 and i have installed "Development Libraries". i'd be appreciated if you could help me. best regards. --0016e6d99eadab98b1046fd62952 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable dear list;
i'd like to make some changes in checkpolicy package acco= rding to a project in my college.
so i clone the git repo and "mak= e install".

$ git clone http://oss.tresys.com/git/selinux.git
$ cd selinux
$ make DESTDIR=3D~/obj install

but it makes some errors, which i hav= e attached them (in result file).
i have to say that my os is fc11 and i= have installed "Development Libraries".
i'd be appreciate= d if you could help me.
best regards.
--0016e6d99eadab98b1046fd62952-- --0016e6d99eadab98b7046fd62954 Content-Type: application/octet-stream; name=result Content-Disposition: attachment; filename=result Content-Transfer-Encoding: base64 X-Attachment-Id: f_fxq7q9wo0 Z2VuaG9tZWRpcmNvbi5jOjM3OjE4OiBlcnJvcjogdXN0ci5oOiBObyBzdWNoIGZpbGUgb3IgZGly ZWN0b3J5CmdlbmhvbWVkaXJjb24uYzogSW4gZnVuY3Rpb24g4oCYZmNvbnRleHRfbWF0Y2hlc+KA mToKZ2VuaG9tZWRpcmNvbi5jOjE3Njogd2FybmluZzogaW1wbGljaXQgZGVjbGFyYXRpb24gb2Yg ZnVuY3Rpb24g4oCYdXN0cl9kdXBfY3N0cuKAmQpnZW5ob21lZGlyY29uLmM6MTc2OiB3YXJuaW5n OiBhc3NpZ25tZW50IG1ha2VzIHBvaW50ZXIgZnJvbSBpbnRlZ2VyIHdpdGhvdXQgYSBjYXN0Cmdl bmhvbWVkaXJjb24uYzoxNzc6IGVycm9yOiDigJhVU1RSX05VTEzigJkgdW5kZWNsYXJlZCAoZmly c3QgdXNlIGluIHRoaXMgZnVuY3Rpb24pCmdlbmhvbWVkaXJjb24uYzoxNzc6IGVycm9yOiAoRWFj aCB1bmRlY2xhcmVkIGlkZW50aWZpZXIgaXMgcmVwb3J0ZWQgb25seSBvbmNlCmdlbmhvbWVkaXJj b24uYzoxNzc6IGVycm9yOiBmb3IgZWFjaCBmdW5jdGlvbiBpdCBhcHBlYXJzIGluLikKZ2VuaG9t ZWRpcmNvbi5jOjE3OTogd2FybmluZzogaW1wbGljaXQgZGVjbGFyYXRpb24gb2YgZnVuY3Rpb24g 4oCYdXN0cl9hZGRfY3N0cuKAmQpnZW5ob21lZGlyY29uLmM6MTgzOiB3YXJuaW5nOiBpbXBsaWNp dCBkZWNsYXJhdGlvbiBvZiBmdW5jdGlvbiDigJh1c3RyX2NtcF9zdWZmaXhfY3N0cl9lceKAmQpn ZW5ob21lZGlyY29uLmM6MTg1OiB3YXJuaW5nOiBpbXBsaWNpdCBkZWNsYXJhdGlvbiBvZiBmdW5j dGlvbiDigJh1c3RyX2RlbOKAmQpnZW5ob21lZGlyY29uLmM6MjA1OiB3YXJuaW5nOiBpbXBsaWNp dCBkZWNsYXJhdGlvbiBvZiBmdW5jdGlvbiDigJh1c3RyX2NzdHLigJkKZ2VuaG9tZWRpcmNvbi5j OjIwNTogd2FybmluZzogcGFzc2luZyBhcmd1bWVudCAyIG9mIOKAmHJlZ2NvbXDigJkgbWFrZXMg cG9pbnRlciBmcm9tIGludGVnZXIgd2l0aG91dCBhIGNhc3QKL3Vzci9pbmNsdWRlL3JlZ2V4Lmg6 NTU2OiBub3RlOiBleHBlY3RlZCDigJhjb25zdCBjaGFyICogX19yZXN0cmljdF9f4oCZIGJ1dCBh cmd1bWVudCBpcyBvZiB0eXBlIOKAmGludOKAmQpnZW5ob21lZGlyY29uLmM6MjE0OiB3YXJuaW5n OiBpbXBsaWNpdCBkZWNsYXJhdGlvbiBvZiBmdW5jdGlvbiDigJh1c3RyX2ZyZWXigJkKZ2VuaG9t ZWRpcmNvbi5jOiBBdCB0b3AgbGV2ZWw6CmdlbmhvbWVkaXJjb24uYzo0MjQ6IGVycm9yOiBleHBl Y3RlZCDigJg94oCZLCDigJgs4oCZLCDigJg74oCZLCDigJhhc23igJkgb3Ig4oCYX19hdHRyaWJ1 dGVfX+KAmSBiZWZvcmUg4oCYKuKAmSB0b2tlbgpnZW5ob21lZGlyY29uLmM6NDQ1OiBlcnJvcjog ZXhwZWN0ZWQg4oCYKeKAmSBiZWZvcmUg4oCYKuKAmSB0b2tlbgpnZW5ob21lZGlyY29uLmM6NDYx OiBlcnJvcjogZXhwZWN0ZWQgZGVjbGFyYXRpb24gc3BlY2lmaWVycyBvciDigJguLi7igJkgYmVm b3JlIOKAmFVzdHLigJkKZ2VuaG9tZWRpcmNvbi5jOiBJbiBmdW5jdGlvbiDigJhjaGVja19saW5l 4oCZOgpnZW5ob21lZGlyY29uLmM6NDY3OiB3YXJuaW5nOiBpbXBsaWNpdCBkZWNsYXJhdGlvbiBv ZiBmdW5jdGlvbiDigJhleHRyYWN0X2NvbnRleHTigJkKZ2VuaG9tZWRpcmNvbi5jOjQ2NzogZXJy b3I6IOKAmGxpbmXigJkgdW5kZWNsYXJlZCAoZmlyc3QgdXNlIGluIHRoaXMgZnVuY3Rpb24pCmdl bmhvbWVkaXJjb24uYzo0Njc6IHdhcm5pbmc6IGFzc2lnbm1lbnQgbWFrZXMgcG9pbnRlciBmcm9t IGludGVnZXIgd2l0aG91dCBhIGNhc3QKZ2VuaG9tZWRpcmNvbi5jOiBJbiBmdW5jdGlvbiDigJh3 cml0ZV9ob21lX2Rpcl9jb250ZXh04oCZOgpnZW5ob21lZGlyY29uLmM6NDk1OiBlcnJvcjog4oCY VXN0cuKAmSB1bmRlY2xhcmVkIChmaXJzdCB1c2UgaW4gdGhpcyBmdW5jdGlvbikKZ2VuaG9tZWRp cmNvbi5jOjQ5NTogZXJyb3I6IOKAmGxpbmXigJkgdW5kZWNsYXJlZCAoZmlyc3QgdXNlIGluIHRo aXMgZnVuY3Rpb24pCmdlbmhvbWVkaXJjb24uYzo0OTU6IGVycm9yOiDigJhVU1RSX05VTEzigJkg dW5kZWNsYXJlZCAoZmlyc3QgdXNlIGluIHRoaXMgZnVuY3Rpb24pCmdlbmhvbWVkaXJjb24uYzo1 MDE6IHdhcm5pbmc6IGltcGxpY2l0IGRlY2xhcmF0aW9uIG9mIGZ1bmN0aW9uIOKAmHJlcGxhY2Vf YWxs4oCZCmdlbmhvbWVkaXJjb24uYzo1MDQ6IGVycm9yOiB0b28gbWFueSBhcmd1bWVudHMgdG8g ZnVuY3Rpb24g4oCYY2hlY2tfbGluZeKAmQpnZW5ob21lZGlyY29uLmM6NTA1OiB3YXJuaW5nOiBp bXBsaWNpdCBkZWNsYXJhdGlvbiBvZiBmdW5jdGlvbiDigJh1c3RyX2lvX3B1dGZpbGVsaW5l4oCZ CmdlbmhvbWVkaXJjb24uYzo1MDg6IHdhcm5pbmc6IGltcGxpY2l0IGRlY2xhcmF0aW9uIG9mIGZ1 bmN0aW9uIOKAmHVzdHJfc2NfZnJlZeKAmQpnZW5ob21lZGlyY29uLmM6IEluIGZ1bmN0aW9uIOKA mHdyaXRlX2hvbWVfcm9vdF9jb250ZXh04oCZOgpnZW5ob21lZGlyY29uLmM6NTI0OiBlcnJvcjog 4oCYVXN0cuKAmSB1bmRlY2xhcmVkIChmaXJzdCB1c2UgaW4gdGhpcyBmdW5jdGlvbikKZ2VuaG9t ZWRpcmNvbi5jOjUyNDogZXJyb3I6IOKAmGxpbmXigJkgdW5kZWNsYXJlZCAoZmlyc3QgdXNlIGlu IHRoaXMgZnVuY3Rpb24pCmdlbmhvbWVkaXJjb24uYzo1MjQ6IGVycm9yOiDigJhVU1RSX05VTEzi gJkgdW5kZWNsYXJlZCAoZmlyc3QgdXNlIGluIHRoaXMgZnVuY3Rpb24pCmdlbmhvbWVkaXJjb24u Yzo1MzA6IGVycm9yOiB0b28gbWFueSBhcmd1bWVudHMgdG8gZnVuY3Rpb24g4oCYY2hlY2tfbGlu ZeKAmQpnZW5ob21lZGlyY29uLmM6IEluIGZ1bmN0aW9uIOKAmHdyaXRlX3VzZXJfY29udGV4dOKA mToKZ2VuaG9tZWRpcmNvbi5jOjU1MzogZXJyb3I6IOKAmFVzdHLigJkgdW5kZWNsYXJlZCAoZmly c3QgdXNlIGluIHRoaXMgZnVuY3Rpb24pCmdlbmhvbWVkaXJjb24uYzo1NTM6IGVycm9yOiDigJhs aW5l4oCZIHVuZGVjbGFyZWQgKGZpcnN0IHVzZSBpbiB0aGlzIGZ1bmN0aW9uKQpnZW5ob21lZGly Y29uLmM6NTUzOiBlcnJvcjog4oCYVVNUUl9OVUxM4oCZIHVuZGVjbGFyZWQgKGZpcnN0IHVzZSBp biB0aGlzIGZ1bmN0aW9uKQpnZW5ob21lZGlyY29uLmM6NTU5OiBlcnJvcjogdG9vIG1hbnkgYXJn dW1lbnRzIHRvIGZ1bmN0aW9uIOKAmGNoZWNrX2xpbmXigJkKZ2VuaG9tZWRpcmNvbi5jOiBJbiBm dW5jdGlvbiDigJh3cml0ZV9jb250ZXh0X2ZpbGXigJk6CmdlbmhvbWVkaXJjb24uYzo4OTM6IGVy cm9yOiDigJhVc3Ry4oCZIHVuZGVjbGFyZWQgKGZpcnN0IHVzZSBpbiB0aGlzIGZ1bmN0aW9uKQpn ZW5ob21lZGlyY29uLmM6ODkzOiBlcnJvcjog4oCYdGVtcOKAmSB1bmRlY2xhcmVkIChmaXJzdCB1 c2UgaW4gdGhpcyBmdW5jdGlvbikKZ2VuaG9tZWRpcmNvbi5jOjkwNTogd2FybmluZzogcGFzc2lu ZyBhcmd1bWVudCA2IG9mIOKAmHdyaXRlX2hvbWVfZGlyX2NvbnRleHTigJkgbWFrZXMgcG9pbnRl ciBmcm9tIGludGVnZXIgd2l0aG91dCBhIGNhc3QKZ2VuaG9tZWRpcmNvbi5jOjQ4NDogbm90ZTog ZXhwZWN0ZWQg4oCYY29uc3QgY2hhciAq4oCZIGJ1dCBhcmd1bWVudCBpcyBvZiB0eXBlIOKAmGlu dOKAmQptYWtlWzJdOiAqKiogW2dlbmhvbWVkaXJjb24ub10gRXJyb3IgMQptYWtlWzFdOiAqKiog W2luc3RhbGxdIEVycm9yIDIKbWFrZTogKioqIFtpbnN0YWxsXSBFcnJvciAxCg== --0016e6d99eadab98b7046fd62954-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: compiling errors! From: Stephen Smalley To: mina elnino Cc: selinux@tycho.nsa.gov In-Reply-To: References: Content-Type: text/plain Date: Wed, 29 Jul 2009 07:57:47 -0400 Message-Id: <1248868667.11627.35.camel@moss-pluto.epoch.ncsc.mil> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Wed, 2009-07-29 at 15:35 +0430, mina elnino wrote: > dear list; > i'd like to make some changes in checkpolicy package according to a > project in my college. > so i clone the git repo and "make install". > > $ git clone http://oss.tresys.com/git/selinux.git > $ cd selinux > $ make DESTDIR=~/obj install > > but it makes some errors, which i have attached them (in result file). > i have to say that my os is fc11 and i have installed "Development > Libraries". > i'd be appreciated if you could help me. > best regards. You need to install the ustr library headers, by running: yum install ustr-devel -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea01.nsa.gov (msux-gh1-uea01.nsa.gov [63.239.67.1]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n6U5LhMa019011 for ; Thu, 30 Jul 2009 01:21:43 -0400 Received: from mail-ew0-f211.google.com (localhost [127.0.0.1]) by msux-gh1-uea01.nsa.gov (8.12.10/8.12.10) with ESMTP id n6U5LHX3017405 for ; Thu, 30 Jul 2009 05:21:17 GMT Received: by ewy7 with SMTP id 7so18567ewy.18 for ; Wed, 29 Jul 2009 22:21:41 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> Date: Thu, 30 Jul 2009 09:51:38 +0430 Message-ID: Subject: Re: compiling errors! From: mina elnino To: selinux@tycho.nsa.gov Content-Type: multipart/alternative; boundary=0016364d2ab5645646046fe57a39 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov --0016364d2ab5645646046fe57a39 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit well, i have to say that i went through the steps in: http://danwalsh.livejournal.com/26428.html and at last i realized that this page is for the ones who want to make policies from the source. now i have packages: $ ls ~/rpmbuild/RPMS/noarch/ selinux-policy-3.6.12-62.fc11.noarch.rpm selinux-policy-doc-3.6.12-62.fc11.noarch.rpm selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm selinux-policy-mls-3.6.12-62.fc11.noarch.rpm selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm none of them is the source policy package. i mean i need that old m4 macros, "*.te" files and "policy.conf" which could be installed by "selinux-policy-targeted-source" or "selinux-policy-strict-source" in fc4. best regards. On Wed, Jul 29, 2009 at 8:24 PM, Stephen Smalley wrote: > On Wed, 2009-07-29 at 18:34 +0430, mina elnino wrote: > > thank you. it got solved by installing "ustr-devel". > > now i should have my source policy files. so according to what you > > said, i used: > > > > $ yumdownloader --source selinux-policy > > > > then i had my "src.rpm" package. but i dont know how to install it. > > the reason is that i am not so familiar with fedora. i have used > > ubuntu and never worked with rpm packages. > > > > i used "Package Installer" but it didn't work! "Backend will not > > install a src rpm file" was the message. i am not sure if i should > > have my "policy.conf" file in /etc/selinux/targeted/src/. and what's > > more, where is the strict type of selinux?? > > Stay on list, please. > > You can just rpm -i the .src.rpm file, and that will expand it under > ~/rpmbuild, where you can follow the instructions in Dan Walsh's blog > that I pointed you to earlier. > > targeted and strict policies have been merged together; you can map > users to confined roles via semanage login or system-config-selinux. > > -- > Stephen Smalley > National Security Agency > > --0016364d2ab5645646046fe57a39 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable well, i have to say that i went through the steps in:

http://danwalsh.livejournal.com/26= 428.html

and at last i realized that this page is for the ones w= ho want to make policies from the source. now i have packages:

$ ls ~/rpmbuild/RPMS/noarch/
selinux-policy-3.6.12-62.fc11.noarch.rp= m
selinux-policy-doc-3.6.12-62.fc11.noarch.rpm
selinux-policy-minimum= -3.6.12-62.fc11.noarch.rpm
selinux-policy-mls-3.6.12-62.fc11.noarch.rpm<= br> selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm

none of them is th= e source policy package. i mean i need that old m4 macros, "*.te"= files and "policy.conf" which could be installed by "selinu= x-policy-targeted-source" or "selinux-policy-strict-source" = in fc4.

best regards.

On Wed, Jul 29, 2009 at= 8:24 PM, Stephen Smalley <sds@tycho.nsa.gov> wrote:
On Wed, 2009-07-29 at 18:34 +0430, mina elnino wrote:
> thank you. it got solved by installing "ustr-devel".
> now i should have my source policy files. so according to what you
> said, i used:
>
> $ yumdownloader --source selinux-policy
>
> then i had my "src.rpm" package. but i dont know how to inst= all it.
> the reason is that i am not so familiar with fedora. i have used
> ubuntu and never worked with rpm packages.
>
> i used "Package Installer" but it didn't work! "Bac= kend will not
> install a src rpm file" was the message. i am not sure if i shoul= d
> have my "policy.conf" file in /etc/selinux/targeted/src/. an= d what's
> more, where is the strict type of selinux??

Stay on list, please.

You can just rpm -i the .src.rpm file, and that will expand it under
~/rpmbuild, where you can follow the instructions in Dan Walsh's blog that I pointed you to earlier.

targeted and strict policies have been merged together; you can map
users to confined roles via semanage login or system-config-selinux.

--
Stephen Smalley
National Security Agency


--0016364d2ab5645646046fe57a39-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n6U9D9F4021923 for ; Thu, 30 Jul 2009 05:13:09 -0400 Received: from smtpq3.gn.mail.iss.as9143.net (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n6U9E2Gr019261 for ; Thu, 30 Jul 2009 09:14:02 GMT From: "Remmolt G. Zwartsenberg" To: "'mina elnino'" Cc: References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> Subject: {Spam?} C Code Compilation Errors Date: Thu, 30 Jul 2009 11:31:37 +0200 Message-ID: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0015_01CA1109.4D4B7890" In-Reply-To: Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. ------=_NextPart_000_0015_01CA1109.4D4B7890 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit RE: compiling errors! Bokertov Mina, Linux is OpenSource, but setting logical names 4 input datasets (especially ODBC live connections with MySQL or ORACLE instances executing OLTP) can create extreme confusion. Especially now that we are replacing big Harddisks by Flash Memory Caches. I hate to ask you, but do you have a pre- and postcondition matrix of the constants and variables used in the Alghoritm? If yes, then we could apply a regression testing procedure. We had considerable problems integrating C++ and C# (Microsoft C) runlibs,.Because SQL Server 2000 would always run out of Tablespace we needed to migrate the POSTFIX header database to SQLServer 2005. I hope this helps, Yours sincerely, ~remmolt _____ From: owner-selinux@tycho.nsa.gov [mailto:owner-selinux@tycho.nsa.gov] On Behalf Of mina elnino Sent: donderdag 30 juli 2009 7:22 To: selinux@tycho.nsa.gov Subject: Re: compiling errors! well, i have to say that i went through the steps in: http://danwalsh.livejournal.com/26428.html and at last i realized that this page is for the ones who want to make policies from the source. now i have packages: $ ls ~/rpmbuild/RPMS/noarch/ selinux-policy-3.6.12-62.fc11.noarch.rpm selinux-policy-doc-3.6.12-62.fc11.noarch.rpm selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm selinux-policy-mls-3.6.12-62.fc11.noarch.rpm selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm none of them is the source policy package. i mean i need that old m4 macros, "*.te" files and "policy.conf" which could be installed by "selinux-policy-targeted-source" or "selinux-policy-strict-source" in fc4. best regards. On Wed, Jul 29, 2009 at 8:24 PM, Stephen Smalley wrote: On Wed, 2009-07-29 at 18:34 +0430, mina elnino wrote: > thank you. it got solved by installing "ustr-devel". > now i should have my source policy files. so according to what you > said, i used: > > $ yumdownloader --source selinux-policy > > then i had my "src.rpm" package. but i dont know how to install it. > the reason is that i am not so familiar with fedora. i have used > ubuntu and never worked with rpm packages. > > i used "Package Installer" but it didn't work! "Backend will not > install a src rpm file" was the message. i am not sure if i should > have my "policy.conf" file in /etc/selinux/targeted/src/. and what's > more, where is the strict type of selinux?? Stay on list, please. You can just rpm -i the .src.rpm file, and that will expand it under ~/rpmbuild, where you can follow the instructions in Dan Walsh's blog that I pointed you to earlier. targeted and strict policies have been merged together; you can map users to confined roles via semanage login or system-config-selinux. -- Stephen Smalley National Security Agency ------=_NextPart_000_0015_01CA1109.4D4B7890 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

RE: compiling = errors!

 

Bokertov = Mina,

 

Linux is OpenSource, but setting = logical names 4 input datasets (especially ODBC live connections with MySQL or = ORACLE instances executing OLTP) can create extreme confusion. Especially now = that we are replacing big Harddisks by Flash Memory = Caches.

I hate to ask you, but do you have = a pre- and postcondition matrix of the constants and variables used in the = Alghoritm? If yes, then we could apply a regression testing procedure. We had = considerable problems integrating C++ and C# (Microsoft C) runlibs,.Because SQL = Server 2000 would always run out of Tablespace we needed to migrate the POSTFIX = header database to SQLServer 2005.

 

I hope this = helps,

 

Yours = sincerely,

 

~remmolt =  

 

From: owner-selinux@tycho.nsa.gov [mailto:owner-selinux@tycho.nsa.gov] = On Behalf Of mina elnino
Sent: donderdag 30 juli = 2009 7:22
To: = selinux@tycho.nsa.gov
Subject: Re: compiling = errors!

 

well, i have = to say that i went through the steps in:

http://danwalsh.livej= ournal.com/26428.html

and at last i realized that this page is for the ones who want to make = policies from the source. now i have packages:

$ ls ~/rpmbuild/RPMS/noarch/
selinux-policy-3.6.12-62.fc11.noarch.rpm
selinux-policy-doc-3.6.12-62.fc11.noarch.rpm
selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm
selinux-policy-mls-3.6.12-62.fc11.noarch.rpm
selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm

none of them is the source policy package. i mean i need that old m4 = macros, "*.te" files and "policy.conf" which could be = installed by "selinux-policy-targeted-source" or "selinux-policy-strict-source" in fc4.

best regards.

On Wed, Jul 29, 2009 at 8:24 PM, Stephen Smalley <sds@tycho.nsa.gov> = wrote:

On Wed, = 2009-07-29 at 18:34 +0430, mina elnino wrote:
> thank you. it got solved by installing "ustr-devel".
> now i should have my source policy files. so according to what = you
> said, i used:
>
> $ yumdownloader --source selinux-policy
>
> then i had my "src.rpm" package. but i dont know how to = install it.
> the reason is that i am not so familiar with fedora. i have = used
> ubuntu and never worked with rpm packages.
>
> i used "Package Installer" but it didn't work! = "Backend will not
> install a src rpm file" was the message. i am not sure if i = should
> have my "policy.conf" file in /etc/selinux/targeted/src/. = and what's
> more, where is the strict type of = selinux??

Stay on list, please.

You can just rpm -i the .src.rpm file, and that will expand it under
~/rpmbuild, where you can follow the instructions in Dan Walsh's = blog
that I pointed you to earlier.

targeted and strict policies have been merged together; you can map
users to confined roles via semanage login or = system-config-selinux.


--
Stephen Smalley
National Security Agency

 

------=_NextPart_000_0015_01CA1109.4D4B7890-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: compiling errors! From: Stephen Smalley To: mina elnino Cc: selinux@tycho.nsa.gov, Daniel J Walsh In-Reply-To: References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> Content-Type: text/plain Date: Thu, 30 Jul 2009 08:22:39 -0400 Message-Id: <1248956559.11627.105.camel@moss-pluto.epoch.ncsc.mil> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote: > well, i have to say that i went through the steps in: > > http://danwalsh.livejournal.com/26428.html > > and at last i realized that this page is for the ones who want to make > policies from the source. now i have packages: > > $ ls ~/rpmbuild/RPMS/noarch/ > selinux-policy-3.6.12-62.fc11.noarch.rpm > selinux-policy-doc-3.6.12-62.fc11.noarch.rpm > selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm > selinux-policy-mls-3.6.12-62.fc11.noarch.rpm > selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm > > none of them is the source policy package. i mean i need that old m4 > macros, "*.te" files and "policy.conf" which could be installed by > "selinux-policy-targeted-source" or "selinux-policy-strict-source" in > fc4. If you want to just unpack the source tree along with any Fedora-specific patches applied, you can do: rpm -i selinux-policy*.src.rpm cd ~/rpmbuild/SPECS rpmbuild -bp selinux-policy.spec cd ../BUILD/serefpolicy* Then you can build it in the usual manner. You can also clone the upstream refpolicy repository if you want: git clone http://oss.tresys.com/git/refpolicy.git cd refpolicy Note however that Fedora policy is built modular rather than monolithic, so there is no policy.conf file per se. But if you run make with the default build.conf, you'll end up with a policy.conf file. -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n6UDWMr6025570 for ; Thu, 30 Jul 2009 09:32:22 -0400 Received: from mail-ew0-f211.google.com (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n6UDXGgj014519 for ; Thu, 30 Jul 2009 13:33:17 GMT Received: by ewy7 with SMTP id 7so282383ewy.18 for ; Thu, 30 Jul 2009 06:32:20 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <1248956559.11627.105.camel@moss-pluto.epoch.ncsc.mil> References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> <1248956559.11627.105.camel@moss-pluto.epoch.ncsc.mil> Date: Thu, 30 Jul 2009 18:02:08 +0430 Message-ID: Subject: Re: compiling errors! From: mina elnino To: selinux@tycho.nsa.gov Content-Type: multipart/mixed; boundary=0016e64c2740948572046fec54da Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov --0016e64c2740948572046fec54da Content-Type: multipart/alternative; boundary=0016e64c2740948568046fec54d8 --0016e64c2740948568046fec54d8 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit to build it: $ make conf $ make policy the second make made an error (in the attached file). and also it generated policy.conf On Thu, Jul 30, 2009 at 4:52 PM, Stephen Smalley wrote: > On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote: > > well, i have to say that i went through the steps in: > > > > http://danwalsh.livejournal.com/26428.html > > > > and at last i realized that this page is for the ones who want to make > > policies from the source. now i have packages: > > > > $ ls ~/rpmbuild/RPMS/noarch/ > > selinux-policy-3.6.12-62.fc11.noarch.rpm > > selinux-policy-doc-3.6.12-62.fc11.noarch.rpm > > selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm > > selinux-policy-mls-3.6.12-62.fc11.noarch.rpm > > selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm > > > > none of them is the source policy package. i mean i need that old m4 > > macros, "*.te" files and "policy.conf" which could be installed by > > "selinux-policy-targeted-source" or "selinux-policy-strict-source" in > > fc4. > > If you want to just unpack the source tree along with any > Fedora-specific patches applied, you can do: > rpm -i selinux-policy*.src.rpm > cd ~/rpmbuild/SPECS > rpmbuild -bp selinux-policy.spec > cd ../BUILD/serefpolicy* > Then you can build it in the usual manner. > > You can also clone the upstream refpolicy repository if you want: > git clone http://oss.tresys.com/git/refpolicy.git > cd refpolicy > > Note however that Fedora policy is built modular rather than monolithic, > so there is no policy.conf file per se. But if you run make with the > default build.conf, you'll end up with a policy.conf file. > > -- > Stephen Smalley > National Security Agency > > --0016e64c2740948568046fec54d8 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable to build it:

$ make conf
$ make policy

the second make mad= e an error (in the attached file).
and also it generated policy.conf
=
On Thu, Jul 30, 2009 at 4:52 PM, Stephen Sma= lley <sds@tycho.n= sa.gov> wrote:
On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote:
> well, i have to say that i went through the steps in:
>
> http://danwalsh.livejournal.com/26428.html
>
> and at last i realized that this page is for the ones who want to make=
> policies from the source. now i have packages:
>
> $ ls ~/rpmbuild/RPMS/noarch/
> selinux-policy-3.6.12-62.fc11.noarch.rpm
> selinux-policy-doc-3.6.12-62.fc11.noarch.rpm
> selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm
> selinux-policy-mls-3.6.12-62.fc11.noarch.rpm
> selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm
>
> none of them is the source policy package. i mean i need that old m4 > macros, "*.te" files and "policy.conf" which could= be installed by
> "selinux-policy-targeted-source" or "selinux-policy-str= ict-source" in
> fc4.

If you want to just unpack the source tree along with any
Fedora-specific patches applied, you can do:
rpm -i selinux-policy*.src.rpm
cd ~/rpmbuild/SPECS
rpmbuild -bp selinux-policy.spec
cd ../BUILD/serefpolicy*
Then you can build it in the usual manner.

You can also clone the upstream refpolicy repository if you want:
git clone http://oss.tresys.com/git/refpolicy.git
cd refpolicy

Note however that Fedora policy is built modular rather than monolithic, so there is no policy.conf file per se. =A0But if you run make with the
default build.conf, you'll end up with a policy.conf file.

--
Stephen Smalley
National Security Agency


--0016e64c2740948568046fec54d8-- --0016e64c2740948572046fec54da Content-Type: application/octet-stream; name=result Content-Disposition: attachment; filename=result Content-Transfer-Encoding: base64 X-Attachment-Id: f_fxriwkr40 bTQ6cG9saWN5L21vZHVsZXMvc2VydmljZXMvcmF6b3IudGU6OTogV2FybmluZzogZXhjZXNzIGFy Z3VtZW50cyB0byBidWlsdGluIGBpZmRlZicgaWdub3JlZApwb2xpY3kvbW9kdWxlcy9zZXJ2aWNl cy9oYWwudGUiOjExOkVSUk9SICdzeW50YXggZXJyb3InIGF0IHRva2VuICd0eXBlYXR0cmlidXRl JyBvbiBsaW5lIDEwMzUzMDM6CiNsaW5lIDExCgl0eXBlYXR0cmlidXRlIGhhbGRfdCBkYWVtb247 CmNoZWNrcG9saWN5OiAgZXJyb3IocykgZW5jb3VudGVyZWQgd2hpbGUgcGFyc2luZyBjb25maWd1 cmF0aW9uCm1ha2U6ICoqKiBbcG9saWN5LjI0XSBFcnJvciAxCg== --0016e64c2740948572046fec54da-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n73COQN4019581 for ; Mon, 3 Aug 2009 08:24:26 -0400 Received: from moss-lions.epoch.ncsc.mil (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n73CPN8m022756 for ; Mon, 3 Aug 2009 12:25:23 GMT Received: from moss-lions.epoch.ncsc.mil (localhost.localdomain [127.0.0.1]) by moss-lions.epoch.ncsc.mil (8.14.3/8.14.3) with ESMTP id n6VC6hdT028640 for ; Fri, 31 Jul 2009 08:06:43 -0400 Received: (from jwcart2@localhost) by moss-lions.epoch.ncsc.mil (8.14.3/8.14.3/Submit) id n6VC6hPN028639 for selinux@tycho.nsa.gov; Fri, 31 Jul 2009 08:06:43 -0400 Subject: Re: compiling errors! From: Stephen Smalley To: mina elnino Cc: selinux@tycho.nsa.gov In-Reply-To: References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> <1248956559.11627.105.camel@moss-pluto.epoch.ncsc.mil> Content-Type: text/plain Date: Thu, 30 Jul 2009 16:00:08 -0400 Message-Id: <1248984008.11627.197.camel@moss-pluto.epoch.ncsc.mil> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Thu, 2009-07-30 at 18:02 +0430, mina elnino wrote: > to build it: > > $ make conf > $ make policy > > the second make made an error (in the attached file). > and also it generated policy.conf Looks like a bug in the policy sources in that .src.rpm; probably only shows up in a monolithic build (normal Fedora policy build is modular). You might want to just use the upstream refpolicy release or git repo. > On Thu, Jul 30, 2009 at 4:52 PM, Stephen Smalley > wrote: > On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote: > > well, i have to say that i went through the steps in: > > > > http://danwalsh.livejournal.com/26428.html > > > > and at last i realized that this page is for the ones who > want to make > > policies from the source. now i have packages: > > > > $ ls ~/rpmbuild/RPMS/noarch/ > > selinux-policy-3.6.12-62.fc11.noarch.rpm > > selinux-policy-doc-3.6.12-62.fc11.noarch.rpm > > selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm > > selinux-policy-mls-3.6.12-62.fc11.noarch.rpm > > selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm > > > > none of them is the source policy package. i mean i need > that old m4 > > macros, "*.te" files and "policy.conf" which could be > installed by > > "selinux-policy-targeted-source" or > "selinux-policy-strict-source" in > > fc4. > > > If you want to just unpack the source tree along with any > Fedora-specific patches applied, you can do: > rpm -i selinux-policy*.src.rpm > cd ~/rpmbuild/SPECS > rpmbuild -bp selinux-policy.spec > cd ../BUILD/serefpolicy* > Then you can build it in the usual manner. > > You can also clone the upstream refpolicy repository if you > want: > git clone http://oss.tresys.com/git/refpolicy.git > cd refpolicy > > Note however that Fedora policy is built modular rather than > monolithic, > so there is no policy.conf file per se. But if you run make > with the > default build.conf, you'll end up with a policy.conf file. > > -- > > Stephen Smalley > National Security Agency > > > -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n73CORG9019584 for ; Mon, 3 Aug 2009 08:24:27 -0400 Received: from moss-lions.epoch.ncsc.mil (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n73CPN8o022756 for ; Mon, 3 Aug 2009 12:25:24 GMT Received: from moss-lions.epoch.ncsc.mil (localhost.localdomain [127.0.0.1]) by moss-lions.epoch.ncsc.mil (8.14.3/8.14.3) with ESMTP id n6VC6hfK028638 for ; Fri, 31 Jul 2009 08:06:43 -0400 Received: (from jwcart2@localhost) by moss-lions.epoch.ncsc.mil (8.14.3/8.14.3/Submit) id n6VC6hN5028636 for selinux@tycho.nsa.gov; Fri, 31 Jul 2009 08:06:43 -0400 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n6UEgE4i001679 for ; Thu, 30 Jul 2009 10:42:14 -0400 Received: from mail-ew0-f211.google.com (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n6UEh8gj005130 for ; Thu, 30 Jul 2009 14:43:09 GMT Received: by ewy7 with SMTP id 7so339507ewy.18 for ; Thu, 30 Jul 2009 07:42:12 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> <1248956559.11627.105.camel@moss-pluto.epoch.ncsc.mil> Date: Thu, 30 Jul 2009 19:12:11 +0430 Message-ID: Subject: Re: compiling errors! From: mina elnino To: selinux@tycho.nsa.gov Content-Type: multipart/alternative; boundary=00504502d07c0e3cd2046fed4f24 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov --00504502d07c0e3cd2046fed4f24 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit and also when i compile the policy.conf the same error arises: $ ./obj/usr/bin/checkpolicy ./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf ./obj/usr/bin/checkpolicy: loading policy configuration from ./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf policy/modules/services/hal.te":11:ERROR 'syntax error' at token 'typeattribute' on line 1035303: #line 11 typeattribute hald_t daemon; checkpolicy: error(s) encountered while parsing configuration is it importanr? if it is not, i'd better comment it! On Thu, Jul 30, 2009 at 6:02 PM, mina elnino wrote: > to build it: > > $ make conf > $ make policy > > the second make made an error (in the attached file). > and also it generated policy.conf > > > On Thu, Jul 30, 2009 at 4:52 PM, Stephen Smalley wrote: > >> On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote: >> > well, i have to say that i went through the steps in: >> > >> > http://danwalsh.livejournal.com/26428.html >> > >> > and at last i realized that this page is for the ones who want to make >> > policies from the source. now i have packages: >> > >> > $ ls ~/rpmbuild/RPMS/noarch/ >> > selinux-policy-3.6.12-62.fc11.noarch.rpm >> > selinux-policy-doc-3.6.12-62.fc11.noarch.rpm >> > selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm >> > selinux-policy-mls-3.6.12-62.fc11.noarch.rpm >> > selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm >> > >> > none of them is the source policy package. i mean i need that old m4 >> > macros, "*.te" files and "policy.conf" which could be installed by >> > "selinux-policy-targeted-source" or "selinux-policy-strict-source" in >> > fc4. >> >> If you want to just unpack the source tree along with any >> Fedora-specific patches applied, you can do: >> rpm -i selinux-policy*.src.rpm >> cd ~/rpmbuild/SPECS >> rpmbuild -bp selinux-policy.spec >> cd ../BUILD/serefpolicy* >> Then you can build it in the usual manner. >> >> You can also clone the upstream refpolicy repository if you want: >> git clone http://oss.tresys.com/git/refpolicy.git >> cd refpolicy >> >> Note however that Fedora policy is built modular rather than monolithic, >> so there is no policy.conf file per se. But if you run make with the >> default build.conf, you'll end up with a policy.conf file. >> >> -- >> Stephen Smalley >> National Security Agency >> >> > --00504502d07c0e3cd2046fed4f24 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable and also when i compile the policy.conf the same error arises:

$ ./o= bj/usr/bin/checkpolicy ./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf
= ./obj/usr/bin/checkpolicy:=A0 loading policy configuration from ./rpmbuild/= BUILD/serefpolicy-3.6.12/policy.conf
policy/modules/services/hal.te":11:ERROR 'syntax error' at tok= en 'typeattribute' on line 1035303:
#line 11
=A0=A0=A0 typeat= tribute hald_t daemon;
checkpolicy:=A0 error(s) encountered while parsin= g configuration

is it importanr? if it is not, i'd better comment it!

On Thu, Jul 30, 2009 at 6:02 PM, mina elnino <potushka@gmail.com&g= t; wrote:
to build it:
<= br>$ make conf
$ make policy

the second make made an error (in th= e attached file).
and also it generated policy.conf


=
On Thu, Jul 30, 2009 at 4:52 PM, Stephen Smalley= <sds@tycho.nsa.gov> wrote:
On Thu, 2009= -07-30 at 09:51 +0430, mina elnino wrote:
> well, i have to say that i went through the steps in:
>
> http://danwalsh.livejournal.com/26428.html
>
> and at last i realized that this page is for the ones who want to make=
> policies from the source. now i have packages:
>
> $ ls ~/rpmbuild/RPMS/noarch/
> selinux-policy-3.6.12-62.fc11.noarch.rpm
> selinux-policy-doc-3.6.12-62.fc11.noarch.rpm
> selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm
> selinux-policy-mls-3.6.12-62.fc11.noarch.rpm
> selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm
>
> none of them is the source policy package. i mean i need that old m4 > macros, "*.te" files and "policy.conf" which could= be installed by
> "selinux-policy-targeted-source" or "selinux-policy-str= ict-source" in
> fc4.

If you want to just unpack the source tree along with any
Fedora-specific patches applied, you can do:
rpm -i selinux-policy*.src.rpm
cd ~/rpmbuild/SPECS
rpmbuild -bp selinux-policy.spec
cd ../BUILD/serefpolicy*
Then you can build it in the usual manner.

You can also clone the upstream refpolicy repository if you want:
git clone http://oss.tresys.com/git/refpolicy.git
cd refpolicy

Note however that Fedora policy is built modular rather than monolithic, so there is no policy.conf file per se. =A0But if you run make with the
default build.conf, you'll end up with a policy.conf file.

--
Stephen Smalley
National Security Agency



--00504502d07c0e3cd2046fed4f24-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n73ENo96000816 for ; Mon, 3 Aug 2009 10:23:50 -0400 Received: from moss-lions.epoch.ncsc.mil (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n73EOl8m003215 for ; Mon, 3 Aug 2009 14:24:47 GMT Received: from moss-lions.epoch.ncsc.mil (localhost.localdomain [127.0.0.1]) by moss-lions.epoch.ncsc.mil (8.14.3/8.14.3) with ESMTP id n73EN0J7005059 for ; Mon, 3 Aug 2009 10:23:00 -0400 Received: (from jwcart2@localhost) by moss-lions.epoch.ncsc.mil (8.14.3/8.14.3/Submit) id n73EN0tI005057 for selinux@tycho.nsa.gov; Mon, 3 Aug 2009 10:23:00 -0400 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n73EJufL000325 for ; Mon, 3 Aug 2009 10:19:56 -0400 Received: from mail-ew0-f211.google.com (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n73EKq8m001962 for ; Mon, 3 Aug 2009 14:20:53 GMT Received: by ewy7 with SMTP id 7so1147273ewy.18 for ; Mon, 03 Aug 2009 07:19:54 -0700 (PDT) Message-ID: <4A76F20D.4090601@gmail.com> Date: Mon, 03 Aug 2009 07:19:57 -0700 From: "Justin P. Mattock" MIME-Version: 1.0 To: mina elnino CC: selinux@tycho.nsa.gov Subject: Re: compiling errors! References: <1248882850.11627.64.camel@moss-pluto.epoch.ncsc.mil> <1248956559.11627.105.camel@moss-pluto.epoch.ncsc.mil> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov mina elnino wrote: > and also when i compile the policy.conf the same error arises: > > $ ./obj/usr/bin/checkpolicy > ./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf > ./obj/usr/bin/checkpolicy: loading policy configuration from > ./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf > policy/modules/services/hal.te":11:ERROR 'syntax error' at token > 'typeattribute' on line 1035303: > #line 11 > typeattribute hald_t daemon; > checkpolicy: error(s) encountered while parsing configuration > > is it importanr? if it is not, i'd better comment it! > > On Thu, Jul 30, 2009 at 6:02 PM, mina elnino > wrote: > > to build it: > > $ make conf > $ make policy > > the second make made an error (in the attached file). > and also it generated policy.conf > > > On Thu, Jul 30, 2009 at 4:52 PM, Stephen Smalley > > wrote: > > On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote: > > well, i have to say that i went through the steps in: > > > > http://danwalsh.livejournal.com/26428.html > > > > and at last i realized that this page is for the ones who > want to make > > policies from the source. now i have packages: > > > > $ ls ~/rpmbuild/RPMS/noarch/ > > selinux-policy-3.6.12-62.fc11.noarch.rpm > > selinux-policy-doc-3.6.12-62.fc11.noarch.rpm > > selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm > > selinux-policy-mls-3.6.12-62.fc11.noarch.rpm > > selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm > > > > none of them is the source policy package. i mean i need > that old m4 > > macros, "*.te" files and "policy.conf" which could be > installed by > > "selinux-policy-targeted-source" or > "selinux-policy-strict-source" in > > fc4. > > If you want to just unpack the source tree along with any > Fedora-specific patches applied, you can do: > rpm -i selinux-policy*.src.rpm > cd ~/rpmbuild/SPECS > rpmbuild -bp selinux-policy.spec > cd ../BUILD/serefpolicy* > Then you can build it in the usual manner. > > You can also clone the upstream refpolicy repository if you want: > git clone http://oss.tresys.com/git/refpolicy.git > cd refpolicy > > Note however that Fedora policy is built modular rather than > monolithic, > so there is no policy.conf file per se. But if you run make > with the > default build.conf, you'll end up with a policy.conf file. > > -- > Stephen Smalley > National Security Agency > > > I think this might be due to checkpolicy being built with not a certain *.h file, or lib. (but could be wrong). Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.