cc -fPIC -shared -o libselinux.so.1 avc.lo avc_internal.lo avc_sidtab.lo booleans.lo canonicalize_context.lo checkAccess.lo check_context.lo compute_av.lo compute_create.lo compute_member.lo compute_relabel.lo compute_user.lo context.lo disable.lo enabled.lo fgetfilecon.lo freecon.lo freeconary.lo fsetfilecon.lo get_context_list.lo get_default_type.lo getenforce.lo getfilecon.lo getpeercon.lo init.lo is_customizable_type.lo lgetfilecon.lo load_policy.lo lsetfilecon.lo matchmediacon.lo matchpathcon.lo policyvers.lo procattr.lo query_user_context.lo rpm.lo selinux_config.lo setenforce.lo setfilecon.lo setrans_client.lo seusers.lo -ldl -lsepol -L/usr/lib -Wl,-soname,libselinux.so.1,-z,defs,-z,relro matchpathcon.lo: In function `set_matchpathcon_flags': matchpathcon.c:(.text+0x2a1): undefined reference to `___tls_get_addr' matchpathcon.lo: In function `.L147': matchpathcon.c:(.text+0x1553): undefined reference to `___tls_get_addr' matchpathcon.lo: In function `matchpathcon_init_prefix': matchpathcon.c:(.text+0x17a9): undefined reference to `___tls_get_addr' matchpathcon.lo: In function `matchpathcon': matchpathcon.c:(.text+0x22a1): undefined reference to `___tls_get_addr' matchpathcon.lo: In function `selinux_file_context_verify': matchpathcon.c:(.text+0x2731): undefined reference to `___tls_get_addr' matchpathcon.lo:matchpathcon.c:(.text+0x2786): more undefined references to `___tls_get_addr' follow collect2: ld returned 1 exit status make[1]: *** [libselinux.so.1] Error 1 make[1]: Leaving directory `/var/tmp/portage/libselinux-1.30.29/work/libselinux-1.30.29/src' make: *** [all] Error 2 !!! ERROR: sys-libs/libselinux-1.30.29 failed. Call stack: ebuild.sh, line 1546: Called dyn_compile ebuild.sh, line 937: Called src_compile libselinux-1.30.29.ebuild, line 37: Called die Portage 2.1.1 (hardened/x86/2.6, gcc-3.4.6, glibc-2.3.6-r4, 2.6.16-hardened-r11 i686) ================================================================= System uname: 2.6.16-hardened-r11 i686 Pentium III (Coppermine) Gentoo Base System version 1.12.5 Last Sync: Mon, 23 Oct 2006 05:30:01 +0000 app-admin/eselect-compiler: [Not Present] dev-java/java-config: [Not Present] dev-lang/python: 2.4.3-r4 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: [Not Present] dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 1.3.13-r4 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.17-r1 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium3" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /var/bind" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo" CXXFLAGS="-march=pentium3" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks loadpolicy metadata-transfer sandbox sfperms strict" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" LINGUAS="" PKGDIR="/usr/portage//packages/x86/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage/" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 acl berkdb bzip2 crypt dlloader elibc_glibc ftp glibc-omitfp gnutls hardened hpn idn input_devices_keyboard input_devices_mouse ipv6 kernel_linux logrotate nls nptl pam pic readline sendfile sensord ssl syslog tcpd uclibc-compat userland_GNU userlocales xattr xorg yp zlib" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, MAKEOPTS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
You cannot use this on the hardened profile as it requires glibc 2.4.
if >sys-libs/libselinux-1.28-r1 cannot be used without glibc 2.4 (which is masked in hardened/x86/2.6) shouldn't >sys-libs/libselinux-1.28-r1 be masked in the profile as well?
By that logic it should be masked on pretty much every other non-selinux profile. If you follow the instructions, you get the right behavior. If you don't, you shoot yourself in the foot.
*** Bug 213636 has been marked as a duplicate of this bug. ***
