refpolicy-ubuntu version 0.2.20091117-0ubuntu1 FTBFS on i386 in precise

Bug #935407 reported by Andreas Moog
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
refpolicy-ubuntu (Ubuntu)
Fix Released
High
Micah Gersten
Precise
Fix Released
High
Micah Gersten

Bug Description

This is a semi-automatic report based on the latest archive rebuild results [1].
Apologies if it reaches you in error.

Excerpt from the buildlog:

Creating ubuntu ntp.pp policy package
/usr/bin/semodule_package -o ntp.pp -m tmp/ntp.mod -f tmp/ntp.mod.fc
Installing ubuntu ntp.pp policy package.
install -m 0644 ntp.pp /build/buildd/refpolicy-ubuntu-0.2.20091117/debian/tmp/usr/share/selinux/ubuntu
Compliling ubuntu nx.mod module
echo "ifdef(\`""nx""_per_role_template',\`" > tmp/nx.mod.role
m4 -D enable_mcs -D distro_ubuntu -D distro_debian -D direct_sysadm_daemon -D enable_ubac -D mls_num_sens=16 -D mls_num_cats=256 -D mcs_num_cats=256 -D hide_broken_symptoms policy/rolemap | gawk '/^[[:blank:]]*[A-Za-z]/{ print "gen_require(type " $3 "; role " $1 ";)\nnx_per_role_template(" $2 "," $3 "," $1 ")" }' >> tmp/nx.mod.role
echo "')" >> tmp/nx.mod.role
echo "ifdef(\`""nx""_per_userdomain_template',\`" >> tmp/nx.mod.role
echo "errprint(\`Warning: per_userdomain_templates have been renamed to per_role_templates (""nx""_per_userdomain_template)'__endline__)" >> tmp/nx.mod.role
m4 -D enable_mcs -D distro_ubuntu -D distro_debian -D direct_sysadm_daemon -D enable_ubac -D mls_num_sens=16 -D mls_num_cats=256 -D mcs_num_cats=256 -D hide_broken_symptoms policy/rolemap | gawk '/^[[:blank:]]*[A-Za-z]/{ print "gen_require(type " $3 "; role " $1 ";)\nnx_per_userdomain_template(" $2 "," $3 "," $1 ")" }' >> tmp/nx.mod.role
echo "')" >> tmp/nx.mod.role
m4 -D enable_mcs -D distro_ubuntu -D distro_debian -D direct_sysadm_daemon -D enable_ubac -D mls_num_sens=16 -D mls_num_cats=256 -D mcs_num_cats=256 -D hide_broken_symptoms -s support/divert.m4 policy/support/file_patterns.spt policy/support/ipc_patterns.spt policy/support/loadable_module.spt policy/support/misc_macros.spt policy/support/misc_patterns.spt policy/support/mls_mcs_macros.spt policy/support/obj_perm_sets.spt support/undivert.m4 tmp/generated_definitions.conf tmp/all_interfaces.conf policy/modules/services/nx.te tmp/nx.mod.role > tmp/nx.tmp
/usr/bin/checkmodule -M -m tmp/nx.tmp -o tmp/nx.mod
policy/modules/services/nx.te":16:ERROR 'unknown role nx_server_r' at token ';' on line 1384:
# cjp: do we really need this?
role nx_server_r types nx_server_t;
/usr/bin/checkmodule: error(s) encountered while parsing configuration
/usr/bin/checkmodule: loading policy configuration from tmp/nx.tmp
make[1]: *** [tmp/nx.mod] Error 1
make[1]: Leaving directory `/build/buildd/refpolicy-ubuntu-0.2.20091117'
make: *** [debian/stamp-makefile-install] Error 2
dpkg-buildpackage: error: /usr/bin/fakeroot debian/rules binary gave error exit status 2
******************************************************************************
Build finished at 20120210-1300
FAILED [dpkg-buildpackage died]

The full buidlog can be found at https://launchpad.net/ubuntu/+archive/test-rebuild-20120201/+build/3169445/+files/buildlog_ubuntu-precise-i386.refpolicy-ubuntu_0.2.20091117-0ubuntu1_FAILEDTOBUILD.txt.gz.

[1] http://people.ubuntuwire.org/~wgrant/rebuild-ftbfs-test/test-rebuild-20120201-precise.html

Andreas Moog (ampelbein)
Changed in refpolicy-ubuntu (Ubuntu):
importance: Undecided → High
Revision history for this message
Tyler Hicks (tyhicks) wrote :

This debdiff fixes the FTBFS on Precise. The failures are caused by the new point release of checkpolicy (2.1.0 versus 2.0.23 in Oneiric).

I've verified that the policy now builds, that upgrading to the new package version is successful, that the system properly boots, and that the patched modules properly load.

Changed in refpolicy-ubuntu (Ubuntu Precise):
status: New → In Progress
assignee: nobody → Tyler Hicks (tyhicks)
Revision history for this message
Tyler Hicks (tyhicks) wrote :

An upstream discussion acknowledging the changes to checkpolicy, which break the compilation of previously valid policy modules, can be found here: http://marc.info/?t=131250737200003&r=1&w=3

Revision history for this message
Tyler Hicks (tyhicks) wrote :

Unsubscribing the ubuntu-release team since a FFe isn't needed. micahg has offered to sponsor the upload. (Thanks!)

Revision history for this message
Tyler Hicks (tyhicks) wrote :

This debdiff addresses some feedback from micahg. I had the wrong bug number in the changelog and didn't include the Bug-Ubuntu tag in the patch.

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "refpolicy-ubuntu_0.2.20091117-0ubuntu2.debdiff" of this bug report has been identified as being a patch in the form of a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-sponsors team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

tags: added: patch
Revision history for this message
Micah Gersten (micahg) wrote :

Taking for sponsorship

Changed in refpolicy-ubuntu (Ubuntu Precise):
assignee: Tyler Hicks (tyhicks) → Micah Gersten (micahg)
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package refpolicy-ubuntu - 0.2.20091117-0ubuntu2

---------------
refpolicy-ubuntu (0.2.20091117-0ubuntu2) precise; urgency=low

  * fix-ftbfs.patch: Fix build failures from new checkpolicy (LP: #935407)
 -- Tyler Hicks <email address hidden> Wed, 18 Apr 2012 01:08:52 -0500

Changed in refpolicy-ubuntu (Ubuntu Precise):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.