Package: checkpolicy Version: 1.30.10-2 Severity: grave Hi,
running 'make relabel' in /etc/selinux/refpolicy/src/policy outputs this: ------ Compiling and installing refpolicy /etc/selinux/refpolicy/policy/policy.20 /usr/bin/checkpolicy policy.conf -o /etc/selinux/refpolicy/policy/policy.20 /usr/bin/checkpolicy: loading policy configuration from policy.conf policy/modules/admin/apt.te:144:WARNING 'unrecognized character' at token ''' on line 83658: ' #line 144 policy/modules/system/selinuxutil.te:624:WARNING 'unrecognized character' at token ''' on line 1055248: ' #line 624 policy/modules/admin/apt.te:144:WARNING 'unrecognized character' at token ''' on line 83658: ' #line 144 policy/modules/system/selinuxutil.te:624:WARNING 'unrecognized character' at token ''' on line 1055248: ' #line 624 policy/modules/admin/apt.te:144:WARNING 'unrecognized character' at token ''' on line 83658: ' #line 144 policy/modules/system/selinuxutil.te:624:WARNING 'unrecognized character' at token ''' on line 1055248: ' #line 624 /usr/bin/checkpolicy: policy configuration loaded /usr/bin/checkpolicy: writing binary representation (version 20) to /etc/selinux/refpolicy/policy/policy.20 Installing system.users m4 -D self_contained_policy -D strict_policy -D hide_broken_symptoms -D self_con tained_policy policy/support/loadable_module.spt policy/support/misc_macros.spt policy/support/obj_perm_sets.spt tmp/generated_definitions.conf policy/users | sed -r -e 's/^[[:blank:]]+//' \ -e '/^[[:blank:]]*($|#)/d' >> tmp/system.users install -m 644 tmp/system.users /etc/selinux/refpolicy/users/system.users Validating refpolicy file_contexts. /usr/sbin/setfiles -q -c /etc/selinux/refpolicy/policy/policy.20 file_contexts make: /usr/sbin/setfiles: Command not found make: *** [/etc/selinux/refpolicy/contexts/files/file_contexts] Error 127 ------ The first few WARNINGS are not critical I assume (correct?), but /usr/sbin/setfiles doesn't exist, it's /sbin/setfiles on my system. Running 'make relabel' again gets me: ------ cat: /selinux/policyvers: No such file or directory Validating refpolicy file_contexts. /usr/sbin/setfiles -q -c /etc/selinux/refpolicy/policy/policy.20 file_contexts make: /usr/sbin/setfiles: Command not found make: *** [/etc/selinux/refpolicy/contexts/files/file_contexts] Error 127 ------ The "cat: /selinux/policyvers: No such file or directory" is probably there because I haven't enabled SELinux yet (no selinux=1 kernel option). After a "ln -s /sbin/setfiles /usr/sbin/setfiles" and another "make relabel" I get: ------ cat: /selinux/policyvers: No such file or directory [...] grep: /etc/libuser.conf: No such file or directory You do not have access to /etc/libuser.conf LU_HOMEDIRECTORY= The user "netuser_u" is not present in the passwd file, skipping... The user "staff_u" is not present in the passwd file, skipping... The user "sysadm_u" is not present in the passwd file, skipping... [...] ------ The rest seems to work ok. HTH, Uwe. -- Uwe Hermann http://www.hermann-uwe.de http://www.it-services-uh.de | http://www.crazy-hacks.org http://www.holsham-traders.de | http://www.unmaintained-free-software.org
signature.asc
Description: Digital signature