Hi Russell,
Please explicitly set fallback_user_level = NULL; or have "s->fallback_user_level = fallback_user_level;" controlled by if(level) too. Unfortunately, this patch won't fix the segfault issue for standard refpolicy(BTW, the MLS refpolicy could be compiled/linked/expanded uneventfully) and I got below backtrace information from gdb: Program received signal SIGSEGV, Segmentation fault. 0x00007fb03c2fd052 in ?? () from /lib/libc.so.6 (gdb) bt #0 0x00007fb03c2fd052 in ?? () from /lib/libc.so.6 #1 0x00007fb03bc4e691 in ustr_replace_cstr () from /usr/lib/libustr-1.0.so.1 #2 0x00007fb03c615846 in replace_all ( str=0xac3ab10 "HOME_DIR/.+\tsystem_u:object_r:user_home_t", repl=0x7fff5d711cd0) at genhomedircon.c:442 #3 0x00007fb03c615ad8 in write_home_dir_context (s=0x7fff5d711df0, out=0x10301f50, tpl=0xe2dc170, user=0xe25cec0 "user_u", &nb! sp; seuser=0xe25cec0 "user_u", home=0xe2913d3 "/home/[^/]*", role_prefix=0xe261d30 "user", level=0x0) at genhomedircon.c:509 #4 0x00007fb03c616b50 in write_context_file (s=0x7fff5d711df0, out=0x10301f50) at genhomedircon.c:942 #5 0x00007fb03c616df0 in semanage_genhomedircon (sh=0x228b790, policydb=0xaab4370, usepasswd=1) at genhomedircon.c:1017 #6 0x00007fb03c611baa in semanage_direct_commit (sh=0x228b790) at direct_api.c:1008 #7 0x00007fb03c617c44 in semanage_commit (sh=0x228b790) at handle.c:435 #8 0x0000000000402471 in main () (gdb) I didn't go further than that. Thanks, Harry > From: russell@xxxxxxxxxxxx > To: eparis@xxxxxxxxxxxxxx > Subject: Re: Toolchain is broken? > Date: Mon, 29 Aug 2011 21:28:50 +1000 > CC: harrytaurus2002@xxxxxxxxxxx; selinux@xxxxxxxxxxxxx> > On Sat, 27 Aug 2011, Eric Paris <eparis@parisplace .org> wrote: > > Must have come from this patch. > > > > commit d784fd71b56cb8f57d5b9fcd784094e004bf7c6a > > Author: Russell Coker <russell@xxxxxxxxxxxx> > > Date: Wed Jan 5 19:30:25 2011 +1100 > > > > libsemanage: patch for MCS/MLS in user files > > > > What do you think of the attached patch? > > -- > My Main Blog http://etbe.coker.com.au/ > My Documents Blog http://doc.coker.com.au/ |