# audit2allow -d Traceback (most recent call last): File "/usr/bin/audit2allow-2.7", line 361, in <module> app.main() File "/usr/bin/audit2allow-2.7", line 355, in main self.__output() File "/usr/bin/audit2allow-2.7", line 330, in __output g.add_access(self.__avs) File "/usr/lib64/python2.7/site-packages/sepolgen/policygen.py", line 211, in add_access self.__add_allow_rules(raw_allow) File "/usr/lib64/python2.7/site-packages/sepolgen/policygen.py", line 179, in __add_allow_rules self.domains = seinfo(ATTRIBUTE, name="domain")[0]["types"] NameError: global name 'seinfo' is not defined Downgrading to sepolgen-1.1.0 makes it work again. Portage 2.1.10.49 (hardened/linux/amd64/selinux, gcc-4.5.3, glibc-2.14.1-r3, 3.2.2-hardened-r1 x86_64) ================================================================= System uname: Linux-3.2.2-hardened-r1-x86_64-Intel-R-_Core-TM-2_Duo_CPU_P8700_@_2.53GHz-with-gentoo-2.0.3 Timestamp of tree: Fri, 04 May 2012 10:30:01 +0000 app-shells/bash: 4.2_p20 dev-lang/python: 2.7.2-r3, 3.2.2 dev-util/cmake: 2.8.6-r4 dev-util/pkgconfig: 0.26 sys-apps/baselayout: 2.0.3 sys-apps/openrc: 0.9.8.4 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.11.1 sys-devel/binutils: 2.21.1-r1 sys-devel/gcc: 4.5.3-r2 sys-devel/gcc-config: 1.5-r2 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82-r1 sys-kernel/linux-headers: 3.1 (virtual/os-headers) sys-libs/glibc: 2.14.1-r3 Repositories: gentoo x-portage ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fixlafiles news parallel-fetch protect-owned sandbox selinux sesandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" GENTOO_MIRRORS="http://distfiles.gentoo.org" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X alsa amd64 berkdb bzip2 cli consolekit cracklib crypt cups cxx dbus dri gdbm gdu gudev hardened iconv icu jpeg justify libkms mmx modules mudflap multilib ncurses nls nptl nptlonly open_perms openmp pam pax_kernel pcre policykit pppd python readline selinux session sse sse2 ssl startup-notification sysfs tcpd thunar udev unicode urandom xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel vesa vmware" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
You have no idea how many patches I'm having to introduce here... sepolgen got wrongfully "updated" upstream with references to seinfo bindings in setools... which isn't available upstream. I could port the patches from fedora into our package, but only after quite some rewriting (still haven't finished yet, but want to show you what was done), mainly because setools was almost python-3 ready, and the fedora patches undo that again. Which also involved policycoreutils, and libselinux to be updated. Anyway, i'm feeling quite positive that I'll be able to have the patches finished and tested in a day or two.
Any progress? Old ebuilds were removed from the portage tree and I have accidentally emerged broken version :-(
(In reply to comment #2) > Any progress? Old ebuilds were removed from the portage tree and I have > accidentally emerged broken version :-( for unlucky ppl like me: wget to overlay and generate manifest: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/dev-python/sepolgen/sepolgen-1.1.0.ebuild?revision=1.3
You should find sepolgen-1.1.5-r2 in hardened-dev overlay which fixes both the seinfo bindings as well as some other python3 related stuff. The test case "audit2allow -d" has also been added to my regression tests.
(In reply to comment #4) > You should find sepolgen-1.1.5-r2 in hardened-dev overlay which fixes both > the seinfo bindings as well as some other python3 related stuff. The test > case "audit2allow -d" has also been added to my regression tests. I haven't tested the overlay, but now _stable_ is broken, and older sepolgen has been removed from the tree (why?). Please make the ebuilds in portage tree work, this is a regression.
Seeing that older sepolgen is incompatible with the current stable policies and other SELinux utilities, I'm afraid that I can't just put them back and hope for the best. I'll try to stabilize the necessary packages as soon as possible.
Resetting status to the used meaning UNCONFIRMED: don't know if the bug is real CONFIRMED: bug is confirmed, but haven't started working on it IN_PROGRESS: working on the bug RESOLVED-TESTREQUEST: fix delivered in overlay, please test VERIFIED-TESTREQUEST: fix delivered as ~arch, please test once more VERIFIED-FIXED: fix in arch (stable) Hence, RESOLVED-TESTREQUEST.
In main tree, ~arch'ed
*** Bug 424523 has been marked as a duplicate of this bug. ***
Stable in portage tree
