[MacPorts] #59397: openssh @8.1_1: fails to build on 10.6: audit-bsm.c:66:10: fatal error: 'bsm/audit_session.h' file not found

MacPorts noreply at macports.org
Thu Oct 24 03:54:28 UTC 2019


#59397: openssh @8.1_1: fails to build on 10.6: audit-bsm.c:66:10: fatal error:
'bsm/audit_session.h' file not found
-------------------------+-------------------------
  Reporter:  grumpybozo  |      Owner:  Ionic
      Type:  defect      |     Status:  reopened
  Priority:  Normal      |  Milestone:
 Component:  ports       |    Version:  2.6.1
Resolution:              |   Keywords:  snowleopard
      Port:  openssh     |
-------------------------+-------------------------

Comment (by Ionic):

 Right, the `__APPLE_API_STRICT_CONFORMANCE` macro explains a lot.

 Note that 10.7+ systems are not affected by this issue because Apple
 dropped usage of the `KAUTH_` macros in
 [https://opensource.apple.com/source/Libc/Libc-763.13/include/sys/acl.h.auto.html
 later sys/acl.h] headers and instead defines internal macros. It looks
 like they never actually intended to let `__APPLE_API_STRICT_CONFORMANCE`
 influence this.

 Luckily, we only really need this to unbreak the sandbox feature on older
 systems, c.f., #48981. Crucially, I can just drop it in `keychain.m` and
 should be good.


 [[br]]

 > There's no file or directory anywhere on 10.6 with 'xpc' in its name.

 Thanks for the heads-up. XPC is a somewhat new (10.7+) interprocess
 communication mechanism backed by (the sadly closed-source) libSystem.

 And again, luckily, we don't need anything that the library or header
 provides.

 [[br]]

 > I'm not much of a C coder or MacPorts wizard, but is it possible to just
 make all the changes since the 7.9p1_2 version of the port conditional on
 the OS version being 10.7 or greater? Because this stuff just isn't
 working on 10.6 and likely never will.

 Theoretically yes, but I don't want to. I'm pretty sure that it should
 work, even on older systems. If a real showstopper shows up, I can still
 revert to the old C-based keychain integration for older systems only. I'm
 not at that point yet.

-- 
Ticket URL: <https://trac.macports.org/ticket/59397#comment:16>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list