Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 187468

Summary: semodule segfaults while emergeing selinux-policies for several applications
Product: Gentoo Linux Reporter: Antoine Kaufmann <toni.kaufmann>
Component: HardenedAssignee: The Gentoo Linux Hardened Team <hardened>
Status: RESOLVED DUPLICATE    
Severity: critical    
Priority: High    
Version: unspecified   
Hardware: AMD64   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: emerge --info
emerge output
kernel log

Description Antoine Kaufmann 2007-08-02 07:22:52 UTC
Every time when I try to emerge selinux policies (ie. selinux-apache or selinux-bind), libsemanage tells me, that a subprocess did not exit successful, but the emerege finishes normaly, but the policy isn't loaded, into the module store. When I watch the logs during the installation, I can see two semodule-processes segfaulting. I tried to debug it, but i couldn't reproduce the problem by calling semodule manually.

Reproducible: Always

Steps to Reproduce:
1. emerge selinux-apache
2.
3.

Actual Results:  
I only tried to emerge the policy on my new gentoo-hardened on an AMD64-platform with hardened gcc-3.4.6 and PaX-patches in the kernel. There are error messages during the emerge-process => attachment emerge.log
In kern.log there are some error messages to => kern.log

Expected Results:  
It should't segfault? ;-)



When I tried to fix this error I reemerged all the packages twice to be sure, that they're all compiled with the selinux USE flags, but that didn't change anything.
It seems a bit strange to me, that I couldn't reproduce this error by calling smeodule manually. When I try to load the policy with `semodule -i /usr/share/selinux/strict/apache.pp' there aren't any segfaults and the policy is installed correctly.
Comment 1 Antoine Kaufmann 2007-08-02 07:24:39 UTC
Created attachment 126678 [details]
emerge --info
Comment 2 Antoine Kaufmann 2007-08-02 07:25:44 UTC
Created attachment 126680 [details]
emerge output
Comment 3 Antoine Kaufmann 2007-08-02 07:26:29 UTC
Created attachment 126681 [details]
kernel log
Comment 4 Petre Rodan 2007-08-02 07:44:17 UTC
see http://bugs.gentoo.org/show_bug.cgi?id=184520
Comment 5 Antoine Kaufmann 2007-08-02 10:53:01 UTC

*** This bug has been marked as a duplicate of bug 184520 ***