Bug 467264

Summary:	<dev-python/sepolgen-1.1.9-r3 test fails due to wrong Makefile location
Product:	Gentoo Linux	Reporter:	Sven Vermeulen (RETIRED) <swift>
Component:	SELinux	Assignee:	Sven Vermeulen (RETIRED) <swift>
Status:	RESOLVED FIXED
Severity:	normal	CC:	quantheory, selinux
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	selinux-utils
Package list:		Runtime testing required:	---

Description Sven Vermeulen (RETIRED) gentoo-dev

2013-04-25 19:47:52 UTC

When trying to mark a domain as permissive, the following error occurs:

/usr/sbin/semanage: compilation failed:
make: /usr/share/selinux/default/Makefile: No such file or directory
make: *** No rule to make target `/usr/share/selinux/default/Makefile'.  Stop.

Reproducible: Always

Comment 1 Sven Vermeulen (RETIRED) gentoo-dev

2013-04-26 17:45:40 UTC

Looks like sepolgen uses /etc/selinux/sepolgen.conf as a way to "override" default/hardcoded values. Creating the file with the following contents makes the permissive domains work again:

"""
SELINUX_DEVEL_PATH=/usr/share/selinux/strict/include
"""

Given that we support multiple SELINUXTYPE targets, I'll see what I can do to either automate this or document it properly.

Comment 2 Sven Vermeulen (RETIRED) gentoo-dev

2013-05-07 09:40:01 UTC

In main tree, ~arch'ed

Comment 3 Sean Santos 2013-05-20 01:31:59 UTC

Hmm. This does not prevent the corresponding test from failing the first time (because sepolgen.conf is not installed when the test runs), but after that, everything works fine.

Comment 4 Sven Vermeulen (RETIRED) gentoo-dev

2013-05-20 08:54:23 UTC

Hmm, chicken-or-egg problem.

I'll see if I can update the test to use a correct path

Comment 5 Sven Vermeulen (RETIRED) gentoo-dev

2013-07-18 20:44:29 UTC

Ok, I patched sepolgen for now to include our set of paths.

I confirmed that without it, the test fails, and with it, the test goes through.

Sadly, I uncovered that the tests run with the default system python (in my case that was python-3.2) whereas sepolgen requires python-2.7 so I need to fix that as well. Also, that means one of the patches currently involved (0010) can be dropped (as that was a python-3 related change).

Time for bed now, will look into this further tomorrow.

Comment 6 Sven Vermeulen (RETIRED) gentoo-dev

2013-07-18 20:45:13 UTC

(In reply to Sven Vermeulen from comment #5)
> Ok, I patched sepolgen for now to include our set of paths.

With which I mean, purely locally - not in the tree.

Comment 7 Sven Vermeulen (RETIRED) gentoo-dev

2013-07-19 20:17:00 UTC

Okay, should be corrected now. I also submitted the patch upstream (did the same last time, no response).

In repo, ~arch'ed.

Comment 8 Sven Vermeulen (RETIRED) gentoo-dev

2014-01-20 20:18:03 UTC

Stable in tree