[DSE-Dev] Bug#822987: seinfo: no types and attributes treated as types
cgzones
cgzones at googlemail.com
Fri Apr 29 17:49:52 UTC 2016
Package: setools
Version: 3.3.8+20151215-3
Severity: normal
After the recent upgrades of the selinux userland libraries i noticed
a bug in the seinfo tool.
Example output:
christian at debianSE:~$ seinfo
Statistics for policy file: /etc/selinux/default/policy/policy.30
Policy Version & Type: v.30 (binary, mls)
Classes: 93 Permissions: 254
Sensitivities: 1 Categories: 1024
Types: 0 Attributes: 4444
Users: 6 Roles: 14
Booleans: 234 Cond. Expr.: 265
Allow: 107477 Neverallow: 0
Auditallow: 26 Dontaudit: 17448
Type_trans: 8930 Type_change: 72
Type_member: 16 Role allow: 28
Role_trans: 454 Range_trans: 38
Constraints: 161 Validatetrans: 0
Initial SIDs: 27 Fs_use: 26
Genfscon: 89 Portcon: 458
Netifcon: 0 Nodecon: 0
Permissives: 0 Polcap: 2
# notice 0 types
christian at debianSE:~$ seinfo -tinit_t -x
christian at debianSE:~$ seinfo -ainit_t -x
init_t
init_t
dbusd_unconfined
dbusd_system_bus_client
sepgsql_unconfined_type
x_domain
xserver_unconfined_type
christian at debianSE:~$ seinfo -t
Types: 0
christian at debianSE:~$ seinfo -a
...
# lists hundreds of types
...
samba_log_t
services_munin_plugin_tmpfs_t
spamd_port_t
transproxy_initrc_exec_t
tripwire_report_t
wireshark_input_xevent_t
Maybe this
https://bugzilla.redhat.com/show_bug.cgi?id=1291336
bugreport is related?
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages setools depends on:
ii libbz2-1.0 1.0.6-8
ii libc6 2.22-7
ii libgcc1 1:6.0.1-2
ii libqpol1 3.3.8+20151215-3
ii libselinux1 2.5-1
ii libsqlite3-0 3.12.2-1
ii libstdc++6 6.0.1-2
ii libxml2 2.9.3+dfsg1-1
setools recommends no packages.
Versions of packages setools suggests:
pn setools-gui <none>
-- no debconf information
More information about the SELinux-devel
mailing list