problem when running checkmodule

problem when running checkmodule

[kihamba nengo]

[-- Attachment #1: Type: text/plain, Size: 316 bytes --]

Hi,
when i run checkmodule -M -m apache.te -o apache.mod i get the following error:
checkmodule: loading policy configuration from apache.te
token too large, exceeds YYLMAX
what is the problem


       
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile.  Try it now.

[-- Attachment #2: Type: text/html, Size: 426 bytes --]

Re: problem when running checkmodule

[Stephen Smalley]

On Fri, 2008-03-21 at 15:01 -0700, kihamba nengo wrote:
> Hi,
> when i run checkmodule -M -m apache.te -o apache.mod i get the
> following error:
> checkmodule: loading policy configuration from apache.te
> token too large, exceeds YYLMAX
> what is the problem

This means that somewhere in apache.te you had a single token that was
longer than YYLMAX characters (defined here as 8192 bytes).

However, at a more basic level, you shouldn't be running checkmodule
directly on apache.te if it contains any macro calls - it has to be
preprocessed first.  Use the refpolicy build infrastructure instead,
i.e.
yum install selinux-policy-devel
make -f /usr/share/selinux/devel/Makefile apache.pp

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.