Gentoo Archives: gentoo-hardened

From: Jukka Palko <jpalko@×××××.com>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] lvm2 and selinux?
Date: Thu, 09 Feb 2006 08:44:03
Message-Id: 43EAFFD3.3040700@gmail.com
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Is there a reason why with selinux lvm2 seems to be mandatory to be
5 compiled with USE=nolvmstatic set?
6
7 If it isn't set lvm2 fails this way:
8 - ---snip---
9 x86_64-pc-linux-gnu-gcc -o lvm.static dumpconfig.o formats.o lvchange.o
10 lvconvert.o lvcreate.o lvdisplay.o lvextend.o lvmchange.o lvmcmdline.o
11 lvmdiskscan.o lvreduce.o lvremove.o lvrename.o lvresize.o lvscan.o
12 polldaemon.o pvchange.o pvcreate.o pvdisplay.o pvmove.o pvremove.o
13 pvresize.o pvscan.o reporter.o segtypes.o toollib.o vgcfgbackup.o
14 vgcfgrestore.o vgchange.o vgck.o vgcreate.o vgconvert.o vgdisplay.o
15 vgexport.o vgextend.o vgimport.o vgmerge.o vgmknodes.o vgreduce.o
16 vgremove.o vgrename.o vgscan.o vgsplit.o lvm-static.o -static
17 - -Wl,--export-dynamic -L../lib -L/usr/lib64 -llvm -ldevmapper \
18 -lreadline -lselinux -ldl -lncurses -rdynamic
19 ../lib/liblvm.a(sharedlib.o): In function `load_shared_library':
20 sharedlib.c:(.text+0xbe): warning: Using 'dlopen' in statically linked
21 applications requires at runtime the shared libraries from the glibc
22 version used for linking
23 /usr/lib64/libreadline.a(complete.o): In function
24 `rl_username_completion_function':
25 complete.c:(.text+0x25e5): warning: Using 'getpwent' in statically
26 linked applications requires at runtime the shared libraries from the
27 glibc version used for linking
28 /usr/lib64/libreadline.a(tilde.o): In function `tilde_expand_word':
29 tilde.c:(.text+0x257): warning: Using 'getpwnam' in statically linked
30 applications requires at runtime the shared libraries from the glibc
31 version used for linking
32 /usr/lib64/libreadline.a(shell.o): In function `sh_get_home_dir':
33 shell.c:(.text+0x1b7): warning: Using 'getpwuid' in statically linked
34 applications requires at runtime the shared libraries from the glibc
35 version used for linking
36 /usr/lib64/libreadline.a(complete.o): In function
37 `rl_username_completion_function':
38 complete.c:(.text+0x25e0): warning: Using 'setpwent' in statically
39 linked applications requires at runtime the shared libraries from the
40 glibc version used for linking
41 complete.c:(.text+0x26b1): warning: Using 'endpwent' in statically
42 linked applications requires at runtime the shared libraries from the
43 glibc version used for linking
44 /usr/lib64/libselinux.a(load_policy.o): In function `selinux_mkload_policy':
45 load_policy.c:(.text+0xff): undefined reference to
46 `sepol_policy_kern_vers_max'
47 load_policy.c:(.text+0x128): undefined reference to
48 `sepol_policy_kern_vers_min'
49 load_policy.c:(.text+0x1d5): undefined reference to
50 `sepol_policy_file_create'
51 load_policy.c:(.text+0x1e7): undefined reference to `sepol_policydb_create'
52 load_policy.c:(.text+0x203): undefined reference to
53 `sepol_policy_file_set_mem'
54 load_policy.c:(.text+0x212): undefined reference to `sepol_policydb_read'
55 load_policy.c:(.text+0x227): undefined reference to
56 `sepol_policydb_set_vers'
57 load_policy.c:(.text+0x241): undefined reference to
58 `sepol_policydb_to_image'
59 load_policy.c:(.text+0x251): undefined reference to `sepol_policy_file_free'
60 load_policy.c:(.text+0x25b): undefined reference to `sepol_policydb_free'
61 load_policy.c:(.text+0x2bd): undefined reference to `sepol_policy_file_free'
62 load_policy.c:(.text+0x2c7): undefined reference to `sepol_policydb_free'
63 load_policy.c:(.text+0x331): undefined reference to `sepol_policy_file_free'
64 load_policy.c:(.text+0x33b): undefined reference to `sepol_policydb_free'
65 load_policy.c:(.text+0x347): undefined reference to `sepol_policy_file_free'
66 load_policy.c:(.text+0x3d4): undefined reference to `sepol_genusers'
67 load_policy.c:(.text+0x413): undefined reference to `sepol_genbools'
68 load_policy.c:(.text+0x435): undefined reference to `sepol_genbools_array'
69 collect2: ld returned 1 exit status
70 make[1]: *** [lvm.static] Error 1
71 make[1]: Leaving directory
72 `/var/tmp/portage/lvm2-2.02.01/work/LVM2.2.02.01/tools'
73 make: *** [tools] Error 2
74
75 !!! ERROR: sys-fs/lvm2-2.02.01 failed.
76 !!! Function src_compile, Line 70, Exitcode 2
77 !!! compile problem
78 !!! If you need support, post the topmost build error, NOT this status
79 message.
80 - ---snip---
81
82 I unmasked the lvm2-2.02.1 and device-mapper newer version as the 2.02.1
83 and 2.01.14-r1 are the first to support the selinux USE flag and
84 lvm2-2.01.09 doesn't compile on selinux.
85
86 Also a bit curious on why the selinux-lvm ebuild isn't in dependencies
87 when installing/upgrading lvm2 on an selinux system. Doesn't it provide
88 the necessary policy datas?
89
90 - --
91 Jukka Palko jpalko@×××××.com
92 -----BEGIN PGP SIGNATURE-----
93 Version: GnuPG v1.4.2 (GNU/Linux)
94 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
95
96 iD8DBQFD6v/TgfJN/zhm0W0RAnlFAKCjW0z/WyhCQqEok/Nq7Xhrl3ouWwCbBzTy
97 T7r2xD7haraQHVTGG0SQ0uQ=
98 =UFYK
99 -----END PGP SIGNATURE-----
100 --
101 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] lvm2 and selinux? Petre Rodan <kaiowas@g.o>