Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 908001 - sec-policy/selinux-pulseaudio-2.20221101-r4 mcs policy fails to build
Summary: sec-policy/selinux-pulseaudio-2.20221101-r4 mcs policy fails to build
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: SELinux (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: SE Linux Bugs
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-06-07 11:38 UTC by Vytautas Krasauskas
Modified: 2023-10-06 16:13 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (sec-policy_selinux-pulseaudio_emerge-info,6.36 KB, text/plain)
2023-06-07 11:38 UTC, Vytautas Krasauskas
Details
build.log (build.log,1.25 KB, text/x-log)
2023-06-07 11:38 UTC, Vytautas Krasauskas
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Vytautas Krasauskas 2023-06-07 11:38:06 UTC
Created attachment 863496 [details]
emerge --info

I am building Gentoo in a chroot on an Ubuntu system, but I don't think it matters in this case, as it's just the MCS policy that seems to be missing:

=============================================
Makefile:8: /usr/share/selinux/mcs/include/Makefile: No such file or directory
make: *** No rule to make target '/usr/share/selinux/mcs/include/Makefile'.  Stop.
=============================================
Comment 1 Vytautas Krasauskas 2023-06-07 11:38:32 UTC
Created attachment 863497 [details]
build.log
Comment 2 Kenton Groombridge gentoo-dev 2023-10-06 16:13:52 UTC
This can happen if you are switching policy types without rebuilding the selinux-base package first. When this package is installed, it reads POLICY_TYPES from make.conf and installs the needed policy dependencies in /usr/share/selinux/<policy>. If 'mcs' is not specified in POLICY_TYPES, then the required files for the mcs policy won't be installed.

Generally speaking when you are doing whole policy updates or rebuilds, it's a good idea to just merge the entire @selinux-rebuild set which pulls in everything correctly.