Re: Is this a bug in sesearch, or ...?

[Joshua Brindle <brindle@quarksecurity.com>]

Dominick Grift wrote:
> I was explaining the concept of (type) attributes using the domain type
> attribute as an example on IRC, and a sharp person embarrassed me by
> noting that the following rule returns nothing where he would have
> expected something:
>
> sesearch -A -d -s domain -c process -p fork
>
> Why does this not return anything? Is is because the target is "self"?

"self" is resolved by the compiler, it isn't present in the kernel binary.

You specified -d "do not search for type's attributes" and then gave an 
attribute as the source. I'm not sure what the intended behavior was but 
excluding the -d gave me back a large set of rules.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.