<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Hans,</p>
<p>As far as I remember Mark Pryor managed to compile it and made a
debian package with XSM enabled.</p>
<p>So I think you can indeed close this bug :)<br>
</p>
<p>Fun fact, I just compiled compiled the new stable version
(4.11.1) yesterday successfully.</p>
<p>If anyone crossing these reports wants to know the process (build
in a Docker container, default flask policy):</p>
<blockquote>
<p><font size="-1"><i># In an updated Debian 9 docker </i></font></p>
<p><font size="-1"><i>echo "deb-src
<a class="moz-txt-link-freetext" href="http://ftp.be.debian.org/debian/">http://ftp.be.debian.org/debian/</a> testing main" >>
/etc/apt/sources.list</i><i><br>
</i><i>apt update && apt upgrade -y</i></font><br>
</p>
<p><font size="-1"><i></i><i># install testing apt sources</i><i><br>
</i><i>apt-get source xen</i><i><br>
</i><i><br>
</i><i># or just use :</i><i><br>
</i><i>apt-get build-dep xen</i><i><br>
</i><i><br>
</i><i>apt install checkpolicy texinfo fakeroot libpci-dev
pandoc libsystemd-dev fig2dev markdown devscripts rdfind</i><i><br>
</i><i><br>
</i><i>cd $(find $(pwd) -maxdepth 1 -type d -name "xen-*")</i><i><br>
</i><i><br>
</i><i>cat <<EOF >> </i><i><br>
</i><i><br>
</i><i># Enableling and configuring XSM and FLASK</i><i><br>
</i><i>XSM_ENABLE=y</i><i><br>
</i><i>FLASK_ENABLE=y</i><i><br>
</i><i>CONFIG_XSM=y</i><i><br>
</i><i>CONFIG_FLASK=y</i><i><br>
</i><i>CONFIG_FLASK_AVC_STATS=y</i><i><br>
</i><i>CONFIG_XSM_POLICY=y</i><i><br>
</i><i><br>
</i><i>EOF</i><i><br>
</i><i><br>
</i><i>cd ..</i><i><br>
</i><i><br>
</i><i>dpkg-buildpackage -rfakeroot -us -uc -b</i><i><br>
</i><i><br>
</i><i>mkdir ../deb_files</i><i><br>
</i><i>mv ../*.deb /../deb_files</i><i><br>
</i><i><br>
</i><i># Copy what is under ./deb_files to the server (docker
cp ... && scp -r ...)</i><i><br>
</i><i><br>
</i><i><br>
</i><i>## Installation notes</i><i><br>
</i><i># Install the deb files</i><i><br>
</i><i>dpkg -i *.deb</i><i><br>
</i><i><br>
</i><i># set GRUB_CMDLINE_XEN_DEFAULT="flask=permissive" and
GRUB_CMDLINE_XEN=""</i><i><br>
</i><i># in /etc/default/grub.d/xen.cfg</i><i><br>
</i><i><br>
</i><i>update-grub</i><i><br>
</i><i><br>
</i><i># if grub doesn't want to start XEN kernel because of
xenpolicy multiboot header bla bla - Li'l Bug with Grub
integration</i><i><br>
</i><i># change </i><i><br>
</i><i># for i in /boo/xen*; do ... to for i in
/boo/xen-*; do ... (line 180)</i><i><br>
</i><i># in vim /etc/grub.d/20_linux_xen</i><i><br>
</i><i><br>
</i><i>update-grub</i></font><br>
</p>
</blockquote>
<p><br>
</p>
<p>Best Regards,</p>
<p>Hervé</p>
<p><br>
</p>
<div class="moz-signature">
<div style="font-family:Helvetica, Arial, sans-serif;
font-size:0.8em;">
<p style="opacity:0.7;"><b style="font-size:1.3em;">Hervé Moris</b><br>
System Administrator / Backend developer</p>
<img style="width:150px;"
src="http://www.loyaltek.com/img/default/logo.png" alt="">
<p style="opacity:0.7;"><b>Loyaltek</b><br>
Cantersteen 47<br>
1000 - Brussels<br>
Tel : +32 2 808.07.58<br>
Fax : +32 2 706.56.84</p>
<a style="opacity:0.7;" href="http://www.loyaltek.com">www.loyaltek.com</a>
<br>
</div>
</div>
<div class="moz-cite-prefix">On 1/23/19 11:41 PM, Hans van
Kranenburg wrote:<br>
</div>
<blockquote type="cite"
cite="mid:60542f65-7487-532c-2942-8da36756f09a@knorrie.org">
<pre class="moz-quote-pre" wrap="">tags 863198 + moreinfo
thanks
Hi Hervé,
I'm hunting down old bug reports in the Xen packages, and also ran into
this one:
<a class="moz-txt-link-freetext" href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863198">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863198</a>
Like John Keates already answered in there, when dealing with the source
of a debian package, you're also expected to use the debian packaging
way of building it. When just issuing make commands, you're dealing with
the upstream source in a way that we cannot support in Debian.
Since there has been no more activity on the report, I might close it in
a while if there's no response, since it's not something we can act on.
Have fun,
Hans
</pre>
</blockquote>
</body>
</html>