Summary: | dev-python/sepolgen-1.1.5 breaks audit2allow | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Paweł Hajdan, Jr. (RETIRED) <phajdan.jr> |
Component: | Hardened | Assignee: | SE Linux Bugs <selinux> |
Status: | VERIFIED FIXED | ||
Severity: | major | CC: | davidweb, newshirt, vdm |
Priority: | Normal | Keywords: | REGRESSION |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Paweł Hajdan, Jr. (RETIRED)
2012-05-08 07:17:27 UTC
You have no idea how many patches I'm having to introduce here... sepolgen got wrongfully "updated" upstream with references to seinfo bindings in setools... which isn't available upstream. I could port the patches from fedora into our package, but only after quite some rewriting (still haven't finished yet, but want to show you what was done), mainly because setools was almost python-3 ready, and the fedora patches undo that again. Which also involved policycoreutils, and libselinux to be updated. Anyway, i'm feeling quite positive that I'll be able to have the patches finished and tested in a day or two. Any progress? Old ebuilds were removed from the portage tree and I have accidentally emerged broken version :-( (In reply to comment #2) > Any progress? Old ebuilds were removed from the portage tree and I have > accidentally emerged broken version :-( for unlucky ppl like me: wget to overlay and generate manifest: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/dev-python/sepolgen/sepolgen-1.1.0.ebuild?revision=1.3 You should find sepolgen-1.1.5-r2 in hardened-dev overlay which fixes both the seinfo bindings as well as some other python3 related stuff. The test case "audit2allow -d" has also been added to my regression tests. (In reply to comment #4) > You should find sepolgen-1.1.5-r2 in hardened-dev overlay which fixes both > the seinfo bindings as well as some other python3 related stuff. The test > case "audit2allow -d" has also been added to my regression tests. I haven't tested the overlay, but now _stable_ is broken, and older sepolgen has been removed from the tree (why?). Please make the ebuilds in portage tree work, this is a regression. Seeing that older sepolgen is incompatible with the current stable policies and other SELinux utilities, I'm afraid that I can't just put them back and hope for the best. I'll try to stabilize the necessary packages as soon as possible. Resetting status to the used meaning UNCONFIRMED: don't know if the bug is real CONFIRMED: bug is confirmed, but haven't started working on it IN_PROGRESS: working on the bug RESOLVED-TESTREQUEST: fix delivered in overlay, please test VERIFIED-TESTREQUEST: fix delivered as ~arch, please test once more VERIFIED-FIXED: fix in arch (stable) Hence, RESOLVED-TESTREQUEST. In main tree, ~arch'ed *** Bug 424523 has been marked as a duplicate of this bug. *** Stable in portage tree |