Policy module building on rawhide
My module builds are failing on rawhide:
$ /usr/bin/make NAME=mls -f /usr/share/selinux/devel/Makefile
cat: /selinux/mls: No such file or directory
Compiling mls fastcgi module
m4: tmp/fastcgi.mod.role: No such file or directory
make: *** [tmp/fastcgi.mod] Error 1
The commands being run, according to "make -n" are:
$ make -n NAME=mls -f /usr/share/selinux/devel/Makefile
cat: /selinux/mls: No such file or directory
echo "Compiling mls fastcgi module"
test -d tmp || mkdir -p tmp
m4 -D enable_mls -D distro_redhat -D hide_broken_symptoms -D
mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024 -s
/usr/share/selinux/devel/include/support/all_perms.spt
/usr/share/selinux/devel/include/support/file_patterns.spt
/usr/share/selinux/devel/include/support/ipc_patterns.spt
/usr/share/selinux/devel/include/support/loadable_module.spt
/usr/share/selinux/devel/include/support/misc_macros.spt
/usr/share/selinux/devel/include/support/misc_patterns.spt
/usr/share/selinux/devel/include/support/mls_mcs_macros.spt
/usr/share/selinux/devel/include/support/obj_perm_sets.spt
tmp/all_interfaces.conf fastcgi.te tmp/fastcgi.mod.role > tmp/fastcgi.tmp
/usr/bin/checkmodule -M -m tmp/fastcgi.tmp -o tmp/fastcgi.mod
m4 -D enable_mls -D distro_redhat -D hide_broken_symptoms -D
mls_num_sens=16 -D mls_num_cats=1024 -D mcs_num_cats=1024
/usr/share/selinux/devel/include/support/all_perms.spt
/usr/share/selinux/devel/include/support/file_patterns.spt
/usr/share/selinux/devel/include/support/ipc_patterns.spt
/usr/share/selinux/devel/include/support/loadable_module.spt
/usr/share/selinux/devel/include/support/misc_macros.spt
/usr/share/selinux/devel/include/support/misc_patterns.spt
/usr/share/selinux/devel/include/support/mls_mcs_macros.spt
/usr/share/selinux/devel/include/support/obj_perm_sets.spt fastcgi.fc >
tmp/fastcgi.mod.fc
echo "Creating mls fastcgi.pp policy package"
/usr/bin/semodule_package -o fastcgi.pp -m tmp/fastcgi.mod -f
tmp/fastcgi.mod.fc
rm tmp/fastcgi.mod.fc tmp/fastcgi.mod
I'm guessing the missing .mod.role file would have been created by the
commented-out rule in /usr/share/selinux/devel/include/Makefile:
tmp/%.mod: $(m4support) tmp/all_interfaces.conf %.te
@$(EINFO) "Compiling $(NAME) $(basename $(@F)) module"
@test -d $(@D) || mkdir -p $(@D)
# $(call peruser-expansion,$(basename $(@F)),$@.role)
$(verbose) $(M4) $(M4PARAM) -s $^ $@.role > $(@:.mod=.tmp)
$(verbose) $(CHECKMODULE) -m $(@:.mod=.tmp) -o $@
Do I need to do something different for F10, or is this a bug?
Paul.