Hi, On Thu, Nov 29, 2007 at 02:27:44PM -0500, tmiller@xxxxxxxxxx wrote: > This is a reworking of the peersid capability patch Joshua sent out > a few weeks ago. This version requires added explicit declaration of > capabilities in the policy. > > I've used the same strings that Paul's kernel diff used (there is > currently just a single capability). >... a prototype line for define_polcap() is missing. zito@bobek:/tmp/checkpolicy-2.0.7$ make cc -g -Wall -O2 -pipe -fno-strict-aliasing -I. -I/usr/include -o checkpolicy.o -c checkpolicy.c yacc -d policy_parse.y cc -g -Wall -O2 -pipe -fno-strict-aliasing -I. -I/usr/include -o y.tab.o -c y.tab.c policy_parse.y: In function 'yyparse': policy_parse.y:772: warning: implicit declaration of function 'define_polcap' policy_parse.y: At top level: policy_parse.y:972: error: static declaration of 'define_polcap' follows non-static declaration policy_parse.y:772: error: previous implicit declaration of 'define_polcap' was here make: *** [y.tab.o] Error 1 Attached is a patch with the prototypee... Regards -- Zito
Index: policy_parse.y =================================================================== --- policy_parse.y (revision 2717) +++ policy_parse.y (working copy) @@ -125,6 +125,7 @@ static int define_netif_context(void); static int define_ipv4_node_context(void); static int define_ipv6_node_context(void); +static int define_polcap(void); typedef int (* require_func_t)();