On Tue, Sep 11, 2012 at 12:19:03PM +0200, Laurent Bigonville wrote: > Le Tue, 11 Sep 2012 08:38:22 +0200, > Ole Kliemann <ole@xxxxxxxxxxxxxxx> a écrit : > > > > > You are building the policy without MLS/MCS, right? > > Yes, TYPE = standard in the build.conf > > > > > Educated guess: It's the same here: > > > > http://marc.info/?l=selinux&m=133003003018371 > > > > Patch would be (helped on Ubuntu): > > > > http://marc.info/?l=selinux&m=132433039902439&w=2 > > Actually this patch is already included in the version of libsemanage > I'm using. > > The patch here: http://marc.info/?l=selinux&m=132636024218187&w=2 fixed > the segfault when loading the policy with Stephen patch. Okay, guess I used that one too then, can't remember. Didn't persue this any further when I moved away from refpol (and don't use any genhomedircon stuff). > > BUT, it seems that the initial assertion is not completely fixed. > > I'm still getting: > > checkmodule: expand.c:700: role_fix_callback: Assertion `new_role != ((void *)0) && new_role->flavor == 1' failed. > > When compiling the policy the following way: > > 1) Take the refpolicy git HEAD > 2) make conf > 3) edit policy/modules.conf and set the following module as part of the > base: init libraries logging selinuxutil modutils storage userdomain > miscfiles sysadm authlogin sysnetwork application locallogin > 4) make policy > 5) -> assetion > > Cheers > > Laurent Bigonville
Attachment:
signature.asc
Description: Digital signature