libselnux generates the paths for selinux security related tools such as seuser and seinfo from unsupported policy paths ( i.e. the paths used in redhat et al not the paths in gentoo base policy) issue any of the commands below in "steps to reproduce" and they always produce a error related to the path as shown in the attached strace log Reproducible: Always Steps to Reproduce: 1.seuser 2.seinfo 3.selinuxconfig Actual Results: errors out or gives paths to non-existant files Expected Results: produce no errors or give the correct path.
Created attachment 46936 [details] seinfo strace log
Created attachment 46937 [details] selinuxconfig strace log
Created attachment 46938 [details] seuser strace log
Created attachment 46939 [details, diff] Proposed patch to libselinux applies to libselinux-1.18
If you have a /etc/selinux directory or symlink that points to a directory, libselinux will use the new /etc/selinux directory scheme. Otherwise it will use /etc/security/selinux. You need to remove /etc/selinux.
there is no file symlink or directory iat "/etc/selinux" redhat uses that scheme and libselinux has been designed to work with they're strict or targeted policy. the original style was /etc/security and libselinux appends "/etc/security" with "/selinux" dependant on what libselinux call is being made. can you please reverify.
This is a problem with setools that should hopfully be fixed in the next release
