From: Matthew Sheets <masheets@linux.microsoft.com>
To: SELinux <selinux@vger.kernel.org>
Subject: secilc genfscon parsing error
Date: Wed, 23 Nov 2022 08:53:42 -0700 [thread overview]
Message-ID: <d11c25c5-727e-342a-162a-e3851ff03d27@linux.microsoft.com> (raw)
Hi,
I am seeing a parsing error from secilc when trying to compile the
following line:
(genfscon sysfs "/zap" file (system_u object_r foo ((s0) (s0))))
But according to the documentation here:
https://github.com/SELinuxProject/selinux/blob/master/secilc/docs/cil_file_labeling_statements.md#genfscon
I believe this should be a valid line.
The compiler error given is:
Invalid syntax
Bad genfscon declaration at out.cil:129
Failed to build AST
Failed to compile cildb: -1
If I remove the file keyword everything compiles correctly.
Other interesting points of data:
In ref policy there is the following line in selinux.te
genfscon selinuxfs /booleans/ -- gen_context(system_u:object_r:boolean_t,s0)
When compiling this to cil with checkpolicy the following line is produced:
(genfscon selinuxfs "/booleans/" (system_u object_r boolean_t (systemlow
systemlow)))
Which has no reference to the optional file_type field.
next reply other threads:[~2022-11-23 15:54 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-11-23 15:53 Matthew Sheets [this message]
2022-11-23 16:15 ` secilc genfscon parsing error James Carter
2022-11-23 17:06 ` Matthew Sheets
2022-11-23 18:10 ` Dominick Grift
2022-11-23 18:13 ` Dominick Grift
2022-11-23 18:29 ` Matthew Sheets
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=d11c25c5-727e-342a-162a-e3851ff03d27@linux.microsoft.com \
--to=masheets@linux.microsoft.com \
--cc=selinux@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.