2008-08-31 23:34:16

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

when loading the latest refpolicy I'm seing a
policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token 'corenet_raw_
corenet_raw_send_multicast_node(kernel_t)

not sure if this is checkpolicy or refpolicy
--
Justin P. Mattock


2008-09-01 00:32:38

by kindloaf

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

Hi,

I also found the same problem. I downloaded refpolicy source and tried to
compile it under ubuntu 8.04. Looks like corenet_raw_send_multicast_node is
an interface(or macro?). And it is not defined anywhere.

Hong

On Sun, Aug 31, 2008 at 7:34 PM, Justin Mattock <[email protected]>wrote:

> when loading the latest refpolicy I'm seing a
> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token
> 'corenet_raw_
> corenet_raw_send_multicast_node(kernel_t)
>
> not sure if this is checkpolicy or refpolicy
> --
> Justin P. Mattock
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo at tycho.nsa.govwith
> the words "unsubscribe selinux" without quotes as the message.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20080831/979de63d/attachment.html

2008-09-01 00:50:49

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

Maybe there is an updated package
For this, other than that I just used
The .tar.bz2 and everything works
Fine.

justin P. Mattock



On Aug 31, 2008, at 5:32 PM, Hong <[email protected]> wrote:

> Hi,
>
> I also found the same problem. I downloaded refpolicy source and
> tried to compile it under ubuntu 8.04. Looks like
> corenet_raw_send_multicast_node is an interface(or macro?). And it
> is not defined anywhere.
>
> Hong
>
> On Sun, Aug 31, 2008 at 7:34 PM, Justin Mattock <[email protected]
> > wrote:
> when loading the latest refpolicy I'm seing a
> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token
> 'corenet_raw_
> corenet_raw_send_multicast_node(kernel_t)
>
> not sure if this is checkpolicy or refpolicy
> --
> Justin P. Mattock
>
> --
> This message was distributed to subscribers of the selinux mailing
> list.
> If you no longer wish to subscribe, send mail to majordomo at tycho.nsa.gov
> with
> the words "unsubscribe selinux" without quotes as the message.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20080831/bf0dd8ed/attachment.html

2008-09-02 12:45:58

by cpebenito

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

On Sun, 2008-08-31 at 19:34 -0400, Justin Mattock wrote:
> when loading the latest refpolicy I'm seing a
> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token 'corenet_raw_
> corenet_raw_send_multicast_node(kernel_t)
>
> not sure if this is checkpolicy or refpolicy

I can't reproduce this. Can you send a modules.conf along with build
settings?

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2008-09-02 15:02:42

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

On Tue, Sep 2, 2008 at 8:45 AM, Christopher J. PeBenito
<[email protected]> wrote:
> On Sun, 2008-08-31 at 19:34 -0400, Justin Mattock wrote:
>> when loading the latest refpolicy I'm seing a
>> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token 'corenet_raw_
>> corenet_raw_send_multicast_node(kernel_t)
>>
>> not sure if this is checkpolicy or refpolicy
>
> I can't reproduce this. Can you send a modules.conf along with build
> settings?
>
> --
> Chris PeBenito
> Tresys Technology, LLC
> (410) 290-1411 x150
>
>

O.K.
Attached is build.conf of the refpolicy
that worked. The policy that was giving me this message
was from svn.
here is a list of the packages I was using:
checkpolicy 2.0.16-2 then downgraded to 2.0.16-1
libselinux1 2.0.65-4
libselinux1-dev 2.0.65-4
libsemanage1 2.0.25-1
libsemanage1-dev 2.0.25-1
libsepol1-dev 2.0.30-2
lsb-base 3.2-20
lsb-release 3.2-20
polgen 1.3-5
policycoreutils 2.0.49-5 was also using this package from feisty
but upgraded to the package with the -U deny option.
python-selinux 2.0.65-4
python-semanage 2.0.25-1
python-sepolgen 1.0.11-4

>From what I remember I was using the debian SID repository
for some of the packages, and then moving to feisty
for some of the other packages as well. I'll try
and load the svn policy again to see if this happens. my guess
is either policycorutils, or checkpolicy was outdated
at the time of building(but could be wrong);
Also attached is the kernel config that I am using for this machine.

regards;
--
Justin P. Mattock
-------------- next part --------------
A non-text attachment was scrubbed...
Name: build.conf
Type: application/octet-stream
Size: 1785 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20080902/2259788a/attachment-0002.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: config
Type: application/octet-stream
Size: 62668 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20080902/2259788a/attachment-0003.obj

2008-09-03 12:41:44

by cpebenito

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

On Tue, 2008-09-02 at 11:02 -0400, Justin Mattock wrote:
> On Tue, Sep 2, 2008 at 8:45 AM, Christopher J. PeBenito
> <[email protected]> wrote:
> > On Sun, 2008-08-31 at 19:34 -0400, Justin Mattock wrote:
> >> when loading the latest refpolicy I'm seing a
> >> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token 'corenet_raw_
> >> corenet_raw_send_multicast_node(kernel_t)
> >>
> >> not sure if this is checkpolicy or refpolicy
> >
> > I can't reproduce this. Can you send a modules.conf along with build
> > settings?
> >
> > --
> > Chris PeBenito
> > Tresys Technology, LLC
> > (410) 290-1411 x150
> >
> >
>
> O.K.
> Attached is build.conf of the refpolicy
> that worked. The policy that was giving me this message
> was from svn.
> here is a list of the packages I was using:
> checkpolicy 2.0.16-2 then downgraded to 2.0.16-1
> libselinux1 2.0.65-4
> libselinux1-dev 2.0.65-4
> libsemanage1 2.0.25-1
> libsemanage1-dev 2.0.25-1
> libsepol1-dev 2.0.30-2
> lsb-base 3.2-20
> lsb-release 3.2-20
> polgen 1.3-5
> policycoreutils 2.0.49-5 was also using this package from feisty
> but upgraded to the package with the -U deny option.
> python-selinux 2.0.65-4
> python-semanage 2.0.25-1
> python-sepolgen 1.0.11-4
>
> From what I remember I was using the debian SID repository
> for some of the packages, and then moving to feisty
> for some of the other packages as well. I'll try
> and load the svn policy again to see if this happens. my guess
> is either policycorutils, or checkpolicy was outdated
> at the time of building(but could be wrong);
> Also attached is the kernel config that I am using for this machine.

I need the modules.conf for the policy, not the kernel config.

--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150

2008-09-03 16:19:27

by Justin P. Mattock

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

On Wed, Sep 3, 2008 at 10:45 AM, Hong <[email protected]> wrote:
> Hi,
>
> I also have the same parsing problem, can you help me to look at it?
> The source is obtained by `apt-get source refpolicy` under ubuntu 8.04.
>
> Thanks,
> Hong
>
> On Wed, Sep 3, 2008 at 8:41 AM, Christopher J. PeBenito
> <[email protected]> wrote:
>>
>> On Tue, 2008-09-02 at 11:02 -0400, Justin Mattock wrote:
>> > On Tue, Sep 2, 2008 at 8:45 AM, Christopher J. PeBenito
>> > <[email protected]> wrote:
>> > > On Sun, 2008-08-31 at 19:34 -0400, Justin Mattock wrote:
>> > >> when loading the latest refpolicy I'm seing a
>> > >> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token
>> > >> 'corenet_raw_
>> > >> corenet_raw_send_multicast_node(kernel_t)
>> > >>
>> > >> not sure if this is checkpolicy or refpolicy
>> > >
>> > > I can't reproduce this. Can you send a modules.conf along with build
>> > > settings?
>> > >
>> > > --
>> > > Chris PeBenito
>> > > Tresys Technology, LLC
>> > > (410) 290-1411 x150
>> > >
>> > >
>> >
>> > O.K.
>> > Attached is build.conf of the refpolicy
>> > that worked. The policy that was giving me this message
>> > was from svn.
>> > here is a list of the packages I was using:
>> > checkpolicy 2.0.16-2 then downgraded to 2.0.16-1
>> > libselinux1 2.0.65-4
>> > libselinux1-dev 2.0.65-4
>> > libsemanage1 2.0.25-1
>> > libsemanage1-dev 2.0.25-1
>> > libsepol1-dev 2.0.30-2
>> > lsb-base 3.2-20
>> > lsb-release 3.2-20
>> > polgen 1.3-5
>> > policycoreutils 2.0.49-5 was also using this package from feisty
>> > but upgraded to the package with the -U deny option.
>> > python-selinux 2.0.65-4
>> > python-semanage 2.0.25-1
>> > python-sepolgen 1.0.11-4
>> >
>> > From what I remember I was using the debian SID repository
>> > for some of the packages, and then moving to feisty
>> > for some of the other packages as well. I'll try
>> > and load the svn policy again to see if this happens. my guess
>> > is either policycorutils, or checkpolicy was outdated
>> > at the time of building(but could be wrong);
>> > Also attached is the kernel config that I am using for this machine.
>>
>> I need the modules.conf for the policy, not the kernel config.
>>
>> --
>> Chris PeBenito
>> Tresys Technology, LLC
>> (410) 290-1411 x150
>>
>>
>> --
>> This message was distributed to subscribers of the selinux mailing list.
>> If you no longer wish to subscribe, send mail to majordomo at tycho.nsa.gov
>> with
>> the words "unsubscribe selinux" without quotes as the message.
>
>

oops!!
here you go.

--
Justin P. Mattock
-------------- next part --------------
A non-text attachment was scrubbed...
Name: modules.conf
Type: application/octet-stream
Size: 25518 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20080903/85e01a91/attachment-0001.obj

2008-09-03 14:45:34

by kindloaf

[permalink] [raw]
Subject: [refpolicy] checkpolicy: error(s) encountered while parsing configuration

Hi,

I also have the same parsing problem, can you help me to look at it?
The source is obtained by `apt-get source refpolicy` under ubuntu 8.04.

Thanks,
Hong

On Wed, Sep 3, 2008 at 8:41 AM, Christopher J. PeBenito <
[email protected]> wrote:

> On Tue, 2008-09-02 at 11:02 -0400, Justin Mattock wrote:
> > On Tue, Sep 2, 2008 at 8:45 AM, Christopher J. PeBenito
> > <[email protected]> wrote:
> > > On Sun, 2008-08-31 at 19:34 -0400, Justin Mattock wrote:
> > >> when loading the latest refpolicy I'm seing a
> > >> policy/modules/kernel/kernel.te":237:ERROR 'syntax error' at token
> 'corenet_raw_
> > >> corenet_raw_send_multicast_node(kernel_t)
> > >>
> > >> not sure if this is checkpolicy or refpolicy
> > >
> > > I can't reproduce this. Can you send a modules.conf along with build
> > > settings?
> > >
> > > --
> > > Chris PeBenito
> > > Tresys Technology, LLC
> > > (410) 290-1411 x150
> > >
> > >
> >
> > O.K.
> > Attached is build.conf of the refpolicy
> > that worked. The policy that was giving me this message
> > was from svn.
> > here is a list of the packages I was using:
> > checkpolicy 2.0.16-2 then downgraded to 2.0.16-1
> > libselinux1 2.0.65-4
> > libselinux1-dev 2.0.65-4
> > libsemanage1 2.0.25-1
> > libsemanage1-dev 2.0.25-1
> > libsepol1-dev 2.0.30-2
> > lsb-base 3.2-20
> > lsb-release 3.2-20
> > polgen 1.3-5
> > policycoreutils 2.0.49-5 was also using this package from feisty
> > but upgraded to the package with the -U deny option.
> > python-selinux 2.0.65-4
> > python-semanage 2.0.25-1
> > python-sepolgen 1.0.11-4
> >
> > From what I remember I was using the debian SID repository
> > for some of the packages, and then moving to feisty
> > for some of the other packages as well. I'll try
> > and load the svn policy again to see if this happens. my guess
> > is either policycorutils, or checkpolicy was outdated
> > at the time of building(but could be wrong);
> > Also attached is the kernel config that I am using for this machine.
>
> I need the modules.conf for the policy, not the kernel config.
>
> --
> Chris PeBenito
> Tresys Technology, LLC
> (410) 290-1411 x150
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo at tycho.nsa.govwith
> the words "unsubscribe selinux" without quotes as the message.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20080903/d46d8621/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: booleans.conf
Type: application/octet-stream
Size: 8724 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20080903/d46d8621/attachment-0002.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: modules.conf
Type: application/octet-stream
Size: 24302 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20080903/d46d8621/attachment-0003.obj