Bug 417199 – Refpolicy-style support in audit2allow is missing

• Status: VERIFIED FIXED
• Product: Gentoo Linux

[Description Sven Vermeulen (RETIRED) 2012-05-23 05:14:33 UTC]

When trying to use audit2allow with refpolicy-style feedback, the following error is displayed:

"""
~# cat raw | audit2allow -m test -R
could not open interface info [/var/lib/sepolgen/interface_info]
doomsday_device ~ # sepolgen-ifgen
error parsing headers
could not find support macros (obj_perm_sets.spt)
"""

Reproducible: Always

[Comment 1 Sven Vermeulen (RETIRED) 2012-05-23 05:15:22 UTC]

Note that this is two commands in the info, one is audit2allow, the other is sepolgen-ifgen.

[Comment 2 nm (RETIRED) 2012-07-03 00:17:24 UTC]

this has....what....to do with the GDP? :D

i don't see anything like this in our docs...do we need to be CCed on it?

[Comment 3 Sven Vermeulen (RETIRED) 2012-07-03 15:03:51 UTC]

That's what happens if you're working on multiple bugs simultaneously...

[Comment 4 Sven Vermeulen (RETIRED) 2012-07-03 16:59:35 UTC]

refpolicy-style should now be supported again (both on python2 and python3).

Errors like the following can be ignored - upstream doesn't support attribute_role yet, but for this functionality it isn't needed anyhow.

/usr/share/selinux/strict/include/admin/usermanage.if: Syntax error on line 163 $2 [type=IDENTIFIER]
/usr/share/selinux/strict/include/admin/usermanage.if: Syntax error on line 206 attribute_role [type=IDENTIFIER]
/

Now in hardened-dev overlay (policycoreutils & sepolgen)

[Comment 5 Sven Vermeulen (RETIRED) 2012-07-10 20:02:21 UTC]

Now in main tree, ~arch'ed:
- sys-apps/policycoreutils-2.1.10-r4
- dev-python/sepolgen-1.1.5-r3

[Comment 6 Sven Vermeulen (RETIRED) 2012-09-29 07:43:07 UTC]

sepolgen is stabilized, but policycoreutils needs to wait a bit (had a few other bugs resolved beginning of september)

[Comment 7 Sven Vermeulen (RETIRED) 2012-10-06 16:58:40 UTC]

policycoreutils is now stabilized as well