There have been a couple of endianness fixes for /sys/fs/selinux/policy, e.g. see: 9085a6422 and b138004 On Wed, Jan 14, 2015 at 6:03 AM, Johannes Segitz <jsegitz@xxxxxxxx> wrote: > Hello, > > running sepolgen-ifgen fails on s390x. It fails because calling > # sepolgen-ifgen-attr-helper /sys/fs/selinux/policy /tmp/tmpsSrJj3 > gives: > libsepol.policydb_index_others: security: 7 users, 47 roles, 3156 types, 201 bools > libsepol.policydb_index_others: security: 1 sens, 1024 cats > libsepol.policydb_index_others: security: 83 classes, 59401 rules, 9799 cond rules > security: ebitmap: map size 1400 does not match my size 64 (high bit was 1545) > error(s) encountered while parsing configuration > > I use version 2.3 of the userspace tools on SLE 12 with kernel 3.12.28. The > policy is based on Fedoras policy with some extension for SUSE > (f85b52d1c6805e9b0a8bd2a4a4332e66e4b52c00 for the base policy and > 627644e1bb9c6f851c2466ab6e0eec7607f472cd for contrib). This combination > works fine on other architectures, only s390x shows this behavior. I did > not work on s390x before so I don't know if this ever worked. > > The message comes from libsepol/src/ebitmap.c:361. Could this be a > endianness issue? > > Best regards > Johannes > -- > Johannes Segitz SUSE Security Team > GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 > SUSE LINUX GmbH Maxfeldstraße 5 90409 Nürnberg, Germany > GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg) > > _______________________________________________ > Selinux mailing list > Selinux@xxxxxxxxxxxxx > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. > To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
