RE: Problems with install

From: Conan Callen <ccallen_at_windowpane.com>
Date: Sun, 28 Oct 2001 14:29:40 -0800 (PST)


I had the same problem (checkpolicy core dump), and got the same advise. After choosing the correct processor (an old pentium) it worked fine.

Conan

> There has been an error like this on the previous version.
> The problem I had was with the processor type in the kernel
> build. It selected a PIII process when I only a clasic type.
> Check you processor type make sure it matches what is in
> you machine.
>
> Mark
>
> -----Original Message-----
> From: White, Tom (AZ15) [mailto:tom.white@honeywell.com]
> Sent: Friday, October 26, 2001 4:29 PM
> To: selinux@tycho.nsa.gov
> Subject: RE: Problems with install
> Importance: High
>
>
> I just downloaded the most recent package from the nsa.gov website. I have
> lsm-selinux-200110161355. I removed the previous version from the system and
> gave it another shot. I went through the build successfully. I also make it
> through the install in ../selinux/module. I then edited my
> ../selinux/policy/users file replacing the example users with two users that
> have accounts on the box. Then I try to make and get:
>
> [root@warthog policy]# make
> cat types/device.te types/devpts.te types/file.te types/network.te
> types/nfs.te types/procfs.te types/security.te > all_
> types.te
> cat domains/system/apache.te domains/system/apmd.te domains/system/atd.te
> domains/system/automount.te domains/system/car
> dmgr.te domains/system/crond.te domains/system/ftpd.te domains/system/gdm.te
> domains/system/getty.te domains/system/gpm.
> te domains/system/hwclock.te domains/system/inetd.te
> domains/system/initrc.te domains/system/init.te domains/system/ipse
> c.te domains/system/kernel.te domains/system/klogd.te domains/system/kmod.te
> domains/system/login.te domains/system/lpd.
> te domains/system/mount.te domains/system/named.te domains/system/portmap.te
> domains/system/pump.te domains/system/rlogi
> nd.te domains/system/rpcd.te domains/system/rshd.te
> domains/system/sendmail.te domains/system/sshd.te domains/system/sys
> logd.te domains/system/tcpd.te domains/system/xfs.te
> domains/system/ypbind.te > system_domains.te
> cat domains/program/crontab.te domains/program/fsadm.te
> domains/program/gnome-pty-helper.te domains/program/ifconfig.te
> domains/program/logrotate.te domains/program/lpr.te domains/program/mail.te
> domains/program/modutil.te domains/program/n
> etscape.te domains/program/newrole.te domains/program/passwd.te
> domains/program/ping.te domains/program/run_init.te doma
> ins/program/ssh.te domains/program/su.te domains/program/utempter.te
> domains/program/xserver.te > program_domains.te
> cat domains/user/user.te > user_domains.te
> cat domains/admin/sysadm.te > admin_domains.te
> cat domains/every.te system_domains.te program_domains.te user_domains.te
> admin_domains.te > all_domains.te
> rm -f system_domains.te program_domains.te user_domains.te admin_domains.te
> cat macros.te all_types.te all_domains.te assert.te > all.te
> rm -f all_types.te all_domains.te
> m4 -s /usr/local/selinux/flask/security_classes
> /usr/local/selinux/flask/initial_sids /usr/local/selinux/flask/access_ve
> ctors all.te rbac users constraints initial_sid_contexts fs_contexts
> devfs_contexts net_contexts > policy.conf
> /usr/local/selinux/bin/checkpolicy -o policy policy.conf
> /usr/local/selinux/bin/checkpolicy: loading policy configuration from
> policy.conf
> make: *** [policy] Illegal instruction (core dumped)
>
> I know I must be doing something wrong, but I don't know what. Any ideas?
> Thanks for the help.
>
> -----Original Message-----
> From: Dave Nielsen [mailto:dave@technogeeks.com]
> Sent: Wednesday, October 24, 2001 4:52 PM
> Cc: White, Tom (AZ15); selinux@tycho.nsa.gov
> Subject: Re: Problems with install
>
>
>
>
> On Wed, 24 Oct 2001, Stephen Smalley wrote:
>
> =>
> =>On Wed, 24 Oct 2001, White, Tom (AZ15) wrote:
> =>
> =>> I am trying to implement the SELinux patch on a Red Hat 7.1 box. I did
> the
> =>> Kernel build following the documentation on the NSA web site. I got to
> step
> =>> 2 in the INSTALLING section and when I do a make install in the module
> =>> directory I get the following output:
> =>
> =>Which release of SELinux are you using, and which download option did you
> =>use?
> =>
> my guess is he is trying one that was before the 2.4.10 release.
>
> =>> [root@warthog module]# make install
> =>> rm -f selinux_plug/include/asm selinux_plug/arch/machine
> =>> ( cd selinux_plug/include ; ln -sf asm-i386 asm)
> =>> ( cd selinux_plug/arch ; ln -sf i386 machine)
> =>
> =>Based on this output, it looks like you are using an older release.
> =>As of the most recent release, the creation of the architecture symbolic
> =>links was moved into the selinux_plug Makefiles. In any event, this
> =>should have happened during the kernel build, so something is wrong here.
>
> The out put looks like Pre 2.4.10 package. I Had these issues with both
> options on the pre 2.4.10.
>
> I would like to say I have a fix for you besides downloading the 2.4.10 or
> better yet the newest one that is out right now. I had the problem and
> then the next day 2.4.10 was release.
>
> =>
> =>> cd ../../lsm/include/asm; install unistd.h
> /usr/local/selinux/include/asm
> =>> cd selinux_plug/ss; install checkpolicy /usr/local/selinux/bin
> =>> install: cannot stat `checkpolicy': No such file or directory
> =>> make: *** [install] Error 1
> =>
> =>The checkpolicy program should have been compiled during the kernel build.
> =>Again, this suggests that your kernel build didn't really succeed. Did
> =>you enable SELinux in the kernel configuration?
> =>
>
> Dave
>
> --
> You have received this message because you are subscribed to the selinux
> list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
> with
> the words "unsubscribe selinux" without quotes as the message.
>
> --
> You have received this message because you are subscribed to the selinux list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
>

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Sun 28 Oct 2001 - 18:28:16 EST

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:26 EDT