[refpolicy] Building refpolicy fails on Arch Linux

[cpebenito@tresys.com (Christopher J. PeBenito)]

On 08/19/11 08:00, Nicky726 wrote:
> Hello,
> 
> I maintain SELinux packages for Arch Linux and recently I came to an error when building refpolicy:
> 
> Creating refpolicy bootloader.pp policy package
> Creating refpolicy brctl.pp policy package
> Creating refpolicy bugzilla.pp policy package
> /usr/bin/semodule_package -o bootloader.pp -m tmp/bootloader.mod -f tmp/bootloader.mod.fc
> /usr/bin/semodule_package -o brctl.pp -m tmp/brctl.mod -f tmp/brctl.mod.fc
> /usr/bin/semodule_package -o bugzilla.pp -m tmp/bugzilla.mod -f tmp/bugzilla.mod.fc
> Creating refpolicy canna.pp policy package
> Creating refpolicy calamaris.pp policy package
> Creating refpolicy ccs.pp policy package
> /usr/bin/semodule_package -o calamaris.pp -m tmp/calamaris.mod -f tmp/calamaris.mod.fc
> /usr/bin/semodule_package -o ccs.pp -m tmp/ccs.mod -f tmp/ccs.mod.fc
> /usr/bin/semodule_package -o canna.pp -m tmp/canna.mod -f tmp/canna.mod.fc
> Creating refpolicy cdrecord.pp policy package
> Creating refpolicy certmaster.pp policy package
> /usr/bin/semodule_package -o cdrecord.pp -m tmp/cdrecord.mod -f tmp/cdrecord.mod.fc
> Creating refpolicy certmonger.pp policy package
> /usr/bin/semodule_package -o certmaster.pp -m tmp/certmaster.mod -f tmp/certmaster.mod.fc
> /usr/bin/semodule_package -o certmonger.pp -m tmp/certmonger.mod -f tmp/certmonger.mod.fc
> Creating refpolicy base module base.conf
> cat tmp/pre_te_files.conf tmp/all_attrs_types.conf tmp/global_bools.conf tmp/only_te_rules.conf tmp/all_post.conf > base.conf
> Compiling refpolicy base module
> /usr/bin/checkmodule base.conf -o tmp/base.mod
> /usr/bin/checkmodule:  loading policy configuration from base.conf
> tmp/rolemap.conf":1687:ERROR 'syntax error' at token 'fs_use_trans' on line 22466:
> fs_use_trans devtmpfs system_u:object_r:device_t;
> genfscon securityfs / system_u:object_r:security_t
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> make: *** [tmp/base.mod] Error 1
> ==> CHYBA: Do??lo k chyb?? v build().
> 
> This happens when building the 20110726 release, it happenes also with the previous release and current git for some time, so I'd say Arch has some 
> "compiler" or library at too recent version or with wrong build options. Also I have to use some fairly outdated flex package to get this far in the build 
> proces, or I get some other error message earlier in the build. Could you please help me resolve these issuese, as currently SELinux is not usable on Arch. 
> I will provide any other information, but currently I am lost with this. I didn't find any list of build-dependencies others than checkpolicy and libsepol, 
> nor did me any good looking into the fedora's src rpm.

Its likely a toolchain problem.  I could compile the policy with the
previous release toolchain and current release toolchain with flex
2.5.35_p10 and bison 2.5.  IIRC buggy flex causes problems like this.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com