Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 417199

Summary: Refpolicy-style support in audit2allow is missing
Product: Gentoo Linux Reporter: Sven Vermeulen (RETIRED) <swift>
Component: HardenedAssignee: Sven Vermeulen (RETIRED) <swift>
Severity: normal CC: selinux
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: selinux-utils
Package list:
Runtime testing required: ---

Description Sven Vermeulen (RETIRED) gentoo-dev 2012-05-23 05:14:33 UTC
When trying to use audit2allow with refpolicy-style feedback, the following error is displayed:

~# cat raw | audit2allow -m test -R
could not open interface info [/var/lib/sepolgen/interface_info]
doomsday_device ~ # sepolgen-ifgen
error parsing headers
could not find support macros (obj_perm_sets.spt)

Reproducible: Always
Comment 1 Sven Vermeulen (RETIRED) gentoo-dev 2012-05-23 05:15:22 UTC
Note that this is two commands in the info, one is audit2allow, the other is sepolgen-ifgen.
Comment 2 nm (RETIRED) gentoo-dev 2012-07-03 00:17:24 UTC
this do with the GDP? :D

i don't see anything like this in our we need to be CCed on it?
Comment 3 Sven Vermeulen (RETIRED) gentoo-dev 2012-07-03 15:03:51 UTC
That's what happens if you're working on multiple bugs simultaneously...
Comment 4 Sven Vermeulen (RETIRED) gentoo-dev 2012-07-03 16:59:35 UTC
refpolicy-style should now be supported again (both on python2 and python3).

Errors like the following can be ignored - upstream doesn't support attribute_role yet, but for this functionality it isn't needed anyhow.

/usr/share/selinux/strict/include/admin/usermanage.if: Syntax error on line 163 $2 [type=IDENTIFIER]
/usr/share/selinux/strict/include/admin/usermanage.if: Syntax error on line 206 attribute_role [type=IDENTIFIER]

Now in hardened-dev overlay (policycoreutils & sepolgen)
Comment 5 Sven Vermeulen (RETIRED) gentoo-dev 2012-07-10 20:02:21 UTC
Now in main tree, ~arch'ed:
- sys-apps/policycoreutils-2.1.10-r4
- dev-python/sepolgen-1.1.5-r3
Comment 6 Sven Vermeulen (RETIRED) gentoo-dev 2012-09-29 07:43:07 UTC
sepolgen is stabilized, but policycoreutils needs to wait a bit (had a few other bugs resolved beginning of september)
Comment 7 Sven Vermeulen (RETIRED) gentoo-dev 2012-10-06 16:58:40 UTC
policycoreutils is now stabilized as well