Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 417199 - Refpolicy-style support in audit2allow is missing
Summary: Refpolicy-style support in audit2allow is missing
Status: VERIFIED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Sven Vermeulen (RETIRED)
URL:
Whiteboard: selinux-utils
Keywords:
Depends on:
Blocks:
 
Reported: 2012-05-23 05:14 UTC by Sven Vermeulen (RETIRED)
Modified: 2012-10-06 16:58 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sven Vermeulen (RETIRED) gentoo-dev 2012-05-23 05:14:33 UTC
When trying to use audit2allow with refpolicy-style feedback, the following error is displayed:

"""
~# cat raw | audit2allow -m test -R
could not open interface info [/var/lib/sepolgen/interface_info]
doomsday_device ~ # sepolgen-ifgen
error parsing headers
could not find support macros (obj_perm_sets.spt)
"""

Reproducible: Always
Comment 1 Sven Vermeulen (RETIRED) gentoo-dev 2012-05-23 05:15:22 UTC
Note that this is two commands in the info, one is audit2allow, the other is sepolgen-ifgen.
Comment 2 nm (RETIRED) gentoo-dev 2012-07-03 00:17:24 UTC
this has....what....to do with the GDP? :D

i don't see anything like this in our docs...do we need to be CCed on it?
Comment 3 Sven Vermeulen (RETIRED) gentoo-dev 2012-07-03 15:03:51 UTC
That's what happens if you're working on multiple bugs simultaneously...
Comment 4 Sven Vermeulen (RETIRED) gentoo-dev 2012-07-03 16:59:35 UTC
refpolicy-style should now be supported again (both on python2 and python3).

Errors like the following can be ignored - upstream doesn't support attribute_role yet, but for this functionality it isn't needed anyhow.

/usr/share/selinux/strict/include/admin/usermanage.if: Syntax error on line 163 $2 [type=IDENTIFIER]
/usr/share/selinux/strict/include/admin/usermanage.if: Syntax error on line 206 attribute_role [type=IDENTIFIER]
/

Now in hardened-dev overlay (policycoreutils & sepolgen)
Comment 5 Sven Vermeulen (RETIRED) gentoo-dev 2012-07-10 20:02:21 UTC
Now in main tree, ~arch'ed:
- sys-apps/policycoreutils-2.1.10-r4
- dev-python/sepolgen-1.1.5-r3
Comment 6 Sven Vermeulen (RETIRED) gentoo-dev 2012-09-29 07:43:07 UTC
sepolgen is stabilized, but policycoreutils needs to wait a bit (had a few other bugs resolved beginning of september)
Comment 7 Sven Vermeulen (RETIRED) gentoo-dev 2012-10-06 16:58:40 UTC
policycoreutils is now stabilized as well