mina elnino wrote:
and also when i compile the policy.conf the same error arises:
$ ./obj/usr/bin/checkpolicy
./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf
./obj/usr/bin/checkpolicy: loading policy configuration from
./rpmbuild/BUILD/serefpolicy-3.6.12/policy.conf
policy/modules/services/hal.te":11:ERROR 'syntax error' at token
'typeattribute' on line 1035303:
#line 11
typeattribute hald_t daemon;
checkpolicy: error(s) encountered while parsing configuration
is it importanr? if it is not, i'd better comment it!
On Thu, Jul 30, 2009 at 6:02 PM, mina elnino <potushka@xxxxxxxxx
<mailto:potushka@xxxxxxxxx>> wrote:
to build it:
$ make conf
$ make policy
the second make made an error (in the attached file).
and also it generated policy.conf
On Thu, Jul 30, 2009 at 4:52 PM, Stephen Smalley
<sds@xxxxxxxxxxxxx <mailto:sds@xxxxxxxxxxxxx>> wrote:
On Thu, 2009-07-30 at 09:51 +0430, mina elnino wrote:
> well, i have to say that i went through the steps in:
>
> http://danwalsh.livejournal.com/26428.html
>
> and at last i realized that this page is for the ones who
want to make
> policies from the source. now i have packages:
>
> $ ls ~/rpmbuild/RPMS/noarch/
> selinux-policy-3.6.12-62.fc11.noarch.rpm
> selinux-policy-doc-3.6.12-62.fc11.noarch.rpm
> selinux-policy-minimum-3.6.12-62.fc11.noarch.rpm
> selinux-policy-mls-3.6.12-62.fc11.noarch.rpm
> selinux-policy-targeted-3.6.12-62.fc11.noarch.rpm
>
> none of them is the source policy package. i mean i need
that old m4
> macros, "*.te" files and "policy.conf" which could be
installed by
> "selinux-policy-targeted-source" or
"selinux-policy-strict-source" in
> fc4.
If you want to just unpack the source tree along with any
Fedora-specific patches applied, you can do:
rpm -i selinux-policy*.src.rpm
cd ~/rpmbuild/SPECS
rpmbuild -bp selinux-policy.spec
cd ../BUILD/serefpolicy*
Then you can build it in the usual manner.
You can also clone the upstream refpolicy repository if you want:
git clone http://oss.tresys.com/git/refpolicy.git
cd refpolicy
Note however that Fedora policy is built modular rather than
monolithic,
so there is no policy.conf file per se. But if you run make
with the
default build.conf, you'll end up with a policy.conf file.
--
Stephen Smalley
National Security Agency
I think this might be due to checkpolicy
being built with not a certain *.h file, or lib.
(but could be wrong).
Justin P. Mattock
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
