Bugzilla Bug 140615

While updating sys-apps/busybox on my SElinux system emerge fails to link
busybox:
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_kern_vers_max'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_kern_vers_min'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_file_create'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_create'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_file_set_mem'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_read'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_set_vers'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_to_image'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_file_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_file_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_file_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policy_file_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_policydb_free'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_genbools_array'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_genusers'
/usr/lib/gcc/i686-pc-linux-gnu/3.4.6/../../../libselinux.a(load_policy.o): In
function `selinux_mkload_policy':
: undefined reference to `sepol_genbools'
collect2: ld returned 1 exit status
make: *** [busybox_unstripped] Error 1

!!! ERROR: sys-apps/busybox-1.1.3 failed.
Call stack:
  ebuild.sh, line 1539:   Called dyn_compile
  ebuild.sh, line 939:   Called src_compile
  busybox-1.1.3.ebuild, line 145:   Called die

# emerge --info
Portage 2.1-r1 (selinux/2005.1/x86/hardened, gcc-3.4.6, glibc-2.3.6-r4,
2.6.16-hardened-r10 i686)
=================================================================
System uname: 2.6.16-hardened-r10 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz
Gentoo Base System version 1.6.15
ccache version 2.3 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-lang/python:     2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -mtune=pentium4 -march=pentium4 -pipe -fomit-frame-pointer
-fforce-addr -ftracer -mmmx -msse -msse2 -mfpmath=sse"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -mtune=pentium4 -march=pentium4 -pipe -fomit-frame-pointer
-fforce-addr -ftracer -mmmx -msse -msse2 -mfpmath=sse"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks loadpolicy metadata-transfer sandbox
selinux sfperms strict"
GENTOO_MIRRORS="ftp://pandemonium.tiscali.de/pub/gentoo/
ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
http://pandemonium.tiscali.de/pub/gentoo/ http://130.59.10.35/mirror/gentoo/
ftp://gentoo.inode.at/source/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="apache apache2 bash-completion ccache chroot cli crypt dba dlloader fam
gdbm gml hardened logrotate md5sum mmx mysqli ncurses pam perl pic python
readline sasl selinux sse sse2 ssl unicode utf8 x86 xml zlib elibc_glibc
input_devices_keyboard input_devices_mouse kernel_linux userland_GNU"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS,
LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY


# sestatus -v
SELinux status:         enabled
SELinuxfs mount:        /selinux
Current mode:           enforcing
Policy version:         20

Policy booleans:
secure_mode             inactive
ssh_sysadm_login        active
user_ping               inactive

Process contexts:
Current context:        mystic:sysadm_r:sysadm_t
Init context:           system_u:system_r:init_t
/sbin/agetty            system_u:system_r:getty_t
/usr/sbin/sshd          system_u:system_r:sshd_t

File contexts:
Controlling term:       mystic:object_r:sysadm_devpts_t
/sbin/init              system_u:object_r:init_exec_t
/sbin/agetty            system_u:object_r:getty_exec_t
/bin/login              system_u:object_r:login_exec_t
/sbin/rc                system_u:object_r:initrc_exec_t
/sbin/runscript.sh      system_u:object_r:initrc_exec_t
/usr/sbin/sshd          system_u:object_r:sshd_exec_t
/etc/passwd             system_u:object_r:etc_t
/etc/shadow             system_u:object_r:shadow_t
/bin/sh                 system_u:object_r:bin_t ->
system_u:object_r:shell_exec_t
/bin/bash               system_u:object_r:shell_exec_t
/usr/bin/newrole        system_u:object_r:newrole_exec_t
/lib/libc.so.6          system_u:object_r:lib_t -> system_u:object_r:shlib_t
/lib/ld-linux.so.2      system_u:object_r:lib_t -> system_u:object_r:ld_so_t

I have the exact same issue here.


emerge --info:

Portage 2.1-r2 (selinux/2005.1/x86/hardened, gcc-3.4.6, glibc-2.3.6-r4,
2.6.14-hardened-r8 i686)
=================================================================
System uname: 2.6.14-hardened-r8 i686 Pentium III (Coppermine)
Gentoo Base System version 1.6.15
app-admin/eselect-compiler: [Not Present]
dev-lang/python:     2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     [Not Present]
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium3 -momit-leaf-frame-pointer -ftracer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/terminfo"
CXXFLAGS="-O2 -march=pentium3 -momit-leaf-frame-pointer -ftracer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks loadpolicy metadata-transfer sandbox selinux
sfperms strict"
GENTOO_MIRRORS="http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo/
ftp://ftp.gentoo-pt.org/pub/gentoo ftp://mirrors1.netvisao.pt/gentoo/
http://trumpetti.tut.atm.fi/gentoo/"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="berkdb crypt dlloader hardened ipv6 ncurses nls nptl nptlonly pam pic
python readline selinux ssl tcpd unicode vhosts x86
 zlib elibc_glibc input_devices_keyboard input_devices_mouse kernel_linux
userland_GNU"                                       
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS,
LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

fixed in cvs.  fix also merged upstream.