Re: Problem with semanage, looks like we don't handle the <<none>> context type?

[Daniel J Walsh <dwalsh@redhat.com>]

Joshua Brindle wrote:
> Daniel J Walsh wrote:
>   
>> Joshua Brindle wrote:
>>     
>>> Daniel J Walsh wrote:
>>>       
>>>> cat /tmp/test.py
>>>> #!/usr/bin/python
>>>> from semanage import *
>>>> sh = semanage_handle_create()
>>>> rc, con = semanage_context_from_string(sh, "<<none>>") rc,fcontext =
>>>> semanage_fcontext_create(sh) semanage_fcontext_set_con(sh,
>>>> fcontext, con) 
>>>>
>>>>
>>>> # python /tmp/test.py
>>>> Segmentation fault
>>>>         
>>> Granted the segfault needs to be fixed but what exactly are you
>>> trying to accomplish? <<none>> is not a type, its just something
>>> matchpathcon uses to short circuit its labeling behavior.
>>>
>>>       
>> I have a request from someone who wants to setup a directory
>> that shortcuts the labeling behaviour.  IE wants restorecon
>> and friends to do nothing in the directory.
>>     
>
> Hrm... Interesting. We probably need to add special logic to libsemanage
> to handle this case. 
>
> In the mean time he can just add it to a .fc file in a policy package
> and insert that.
>   
Yes that is what he did.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.