On Wed, Dec 21, 2016 at 1:06 PM, Nicolas Iooss <nicolas.iooss@xxxxxxx> wrote: > On 21/12/16 17:14, Paul Moore wrote: >> From: Paul Moore <paul@xxxxxxxxxxxxxx> >> >> Commit 3322d0d64f4e ("selinux: keep SELinux in sync with new capability >> definitions") added a check on the defined capabilities without >> explicitly including the capability header file which caused problems >> when building genheaders for users of clang/llvm. Resolve this by >> using the kernel headers when building genheaders, which is arguably >> the right thing to do regardless, and explicitly including the >> kernel's capability.h header file in classmap.h. We also update the >> mdp build, even though it wasn't causing an error we really should >> be using the headers from the kernel we are building. > > I tested this patch and it works fine on my configuration (no compiler > warning and the kernel headers are included as expected). Thanks! Great, thanks for the verification. I'll send this patch up for v4.10 later today. -- paul moore security @ redhat _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.