| Summary: | dev-libs/apr-1.7.0-r2: fails to compile with SELinux (locks/unix/proc_mutex.c:1494:28: error: ‘mutex_proc_pthread_methods’ undeclared (first use in this function)) | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | yesi <yesi> |
| Component: | Current packages | Assignee: | Lars Wendler (Polynomial-C) (RETIRED) <polynomial-c> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | major | CC: | sam |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | AMD64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 738546 | ||
| Bug Blocks: | |||
| Attachments: | build.log | ||
|
Description
yesi
2021-06-15 09:49:13 UTC
This is rather interesting: a user hit this in the past on the forums [0] but it.. stopped once they disabled enforcing. This does actually seem to be a duplicate of the other, but I'll keep this one open for now I guess to allow easier searching? [0] https://forums.gentoo.org/viewtopic-p-8493510.html?sid=d44c812aa0fd848c7500bedfbacb6d1e#8493510 (In reply to Sam James from comment #1) > This is rather interesting: a user hit this in the past on the forums [0] > but it.. stopped once they disabled enforcing. > > This does actually seem to be a duplicate of the other, but I'll keep this > one open for now I guess to allow easier searching? > > [0] > https://forums.gentoo.org/viewtopic-p-8493510. > html?sid=d44c812aa0fd848c7500bedfbacb6d1e#8493510 I read that forum post before declaring this bug. And i do not want to disable the enforcing SELinux to compile. I followed this bug : https://bugs.gentoo.org/738546 The following selinux policy allows dev-libs/apr-1.7.0-r1 to build: module conftest-local 1.0; require { type zero_device_t; type unreserved_port_t; type node_t; type portage_sandbox_t; class chr_file map; class tcp_socket { name_connect node_bind }; } #============= portage_sandbox_t ============== #!!!! This avc can be allowed using the boolean 'portage_enable_test' allow portage_sandbox_t node_t:tcp_socket node_bind; #!!!! This avc can be allowed using the boolean 'portage_enable_test' allow portage_sandbox_t unreserved_port_t:tcp_socket name_connect; allow portage_sandbox_t zero_device_t:chr_file map; I disabled the policies after compiling. I tested with this policy : it does works allow portage_sandbox_t zero_device_t:chr_file map; I close this thread since there is already another one at https://bugs.gentoo.org/738546 *** This bug has been marked as a duplicate of bug 738546 *** |
