On 06/18/2017 09:46 AM, Jason Zaman wrote:
On Sun, Jun 18, 2017 at 03:32:33PM +0800, Jason Zaman wrote:
There is a bug that needs to be fixed before the final release:
https://bugs.gentoo.org/show_bug.cgi?id=621762
I think the fix is just add override in utils/Makefile to the LDLIBS and
LDFLAGS bits. I'm not sure I'll have time to get around to testing
it so just wanted to let you know before the final release.
Yep, thats the fix, I sent a patch.
https://gitweb.gentoo.org/repo/gentoo.git/tree/sys-libs/libselinux/libselinux-9999.ebuild#n58
The gentoo ebuild overrides LDFLAGS on the commandline which is why the
override was required. When i first tried to repro manually i just
exported LDFLAGS and couldnt repro. once i read the docs on override it
was pretty obvious.
A similar patch is needed almost for every other part when you try to
build everything from git first and then install it.
In order to that I need to apply a patch [1] and do the following steps:
ln -s ../../cil/include/cil libsepol/include/sepol/cil
make \
CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" \
LIBSEPOLA="`pwd`/libsepol/src/libsepol.a"
make -C libselinux \
CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" \
LIBSEPOLA="`pwd`/libsepol/src/libsepol.a" \
PYTHON=%{__python} pywrap
make \
DESTDIR="%{buildroot}" LIBDIR="%{buildroot}%{_libdir}" \
CFLAGS="%{optflags}" LDFLAGS="%{?__global_ldflags}" \
SHLIBDIR="%{buildroot}/%{_lib}" \
BINDIR="%{buildroot}%{_bindir}" \
SBINDIR="%{buildroot}%{_sbindir}" \
PYTHON=%{__python} \
install install-pywrap
[1]
https://gitlab.com/bachradsusi/selinux-rpm/blob/master/0001-Fix-build-without-install.patch
Using this I preserve rpath problems pointing to DESTDIR and rpm can
simply use everything from DESTDIR for /
Petr
-- Jason
On Fri, Jun 16, 2017 at 12:55:09PM -0400, Stephen Smalley wrote:
A second release candidate for the SELinux userspace is now available
at:
https://github.com/SELinuxProject/selinux/wiki/Releases
Please give it a test and let us know if there are any issues.
Changes from the -rc1 release:
James Carter (2):
libsepol: Fix neverallow bug when checking conditional policy
libsepol/cil: Fix bugs when writing policy.conf rules
Nicolas Iooss (1):
libsepol: destroy the expanded level when
mls_semantic_level_expand() fails
Richard Haines (2):
libsepol/cil: ibendportcon fails to resolve in CIL policy
secilc: Update test policy and documentation for Infiniband
Stephen Smalley (1):
Update VERSION files for 2.7-rc2 release.
Vit Mojzis (1):
policycoreutils/fixfiles: do not dereference link files in tmp
