[refpolicy] Building refpolicy fails on Arch Linux

[cpebenito@tresys.com (Christopher J. PeBenito)]

On 08/19/11 09:21, Nicky726 wrote:
> Dne P?? 19. srpna 2011 08.14:26 Chris PeBenito napsal(a): 
>> Its likely a toolchain problem.  I could compile the policy with the
>> previous release toolchain and current release toolchain with flex
>> 2.5.35_p10 and bison 2.5.  IIRC buggy flex causes problems like this.
> 
> Hi, thanx. What do you mean by toolchain? The SELinux userspace? I I use Arch's flex 2.5.35-4 and bison 2.5-1 the build process end earlier with: 

The SELinux userspace.

> m4 -D enable_ubac -D mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024 -D hide_broken_symptoms -s support/divert.m4 
> policy/support/file_patterns.spt policy/support/ipc_patterns.spt policy/support/obj_perm_sets.spt policy/support/misc_patterns.spt 
> policy/support/misc_macros.spt policy/support/mls_mcs_macros.spt policy/support/loadable_module.spt support/undivert.m4 
> tmp/generated_definitions.conf tmp/all_interfaces.conf policy/modules/services/cipe.te tmp/cipe.mod.role > tmp/cipe.tmp
> /usr/bin/checkmodule -m tmp/cgroup.tmp -o tmp/cgroup.mod
> /usr/bin/checkmodule:  loading policy configuration from tmp/cgroup.tmp
> policy/modules/services/cgroup.te":10:ERROR 'syntax error' at token ':' on line 486:
>         allow cgclear_t init_t:process sigchld;
> #line 10
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> make: *** [tmp/cgroup.mod] Error 1
> make: *** Waiting for unfinished jobs....
> /usr/bin/checkmodule -m tmp/cipe.tmp -o tmp/cipe.mod
> /usr/bin/checkmodule:  loading policy configuration from tmp/cipe.tmp
> policy/modules/services/cipe.te":10:ERROR 'syntax error' at token ':' on line 486:
>         allow ciped_t init_t:process sigchld;
> #line 10
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> make: *** [tmp/cipe.mod] Error 1
> /usr/bin/checkmodule -m tmp/chronyd.tmp -o tmp/chronyd.mod
> /usr/bin/checkmodule:  loading policy configuration from tmp/chronyd.tmp
> policy/modules/services/chronyd.te":10:ERROR 'syntax error' at token ':' on line 486:
>         allow chronyd_t init_t:process sigchld;
> #line 10
> /usr/bin/checkmodule:  error(s) encountered while parsing configuration
> make: *** [tmp/chronyd.mod] Error 1
> ==> CHYBA: Do??lo k chyb?? v build().
> 
> This version of package flex you are refering to is fedoras version?

Actually its Gentoo's version.  I haven't heard any problems from Dan
about compile errors like this in Fedora, so I'm still thinking its your
toolchain.  Did you rebuild checkpolicy after changing flex and bison?
This pops up from time to time, the last thread I can find on it is here:

http://marc.info/?l=selinux&m=126762983301065&w=2

Also cc'ing Steve Smalley in case he has any additional feedback.

Steve: maybe we should put up a page on the selinuxproject.org about
these flex issues.  Maybe a summary of what we know or known bad
versions or something.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com