On 11/1/19 6:54 AM, Nicolas Iooss wrote:
On Thu, Oct 31, 2019 at 10:43 AM Petr Lautrbach <plautrba@xxxxxxxxxx> wrote:
Hello,
A 3.0-rc1 release candidate for the SELinux userspace is now
available at:
https://github.com/SELinuxProject/selinux/wiki/Releases
Please give it a test and let us know if there are any issues.
If there are specific changes that you think should be called out
in release notes for packagers and users in the final release
announcement, let us know.
Hello, I started testing this RC on a test virtual machine (which uses
Arch Linux and refpolicy) and something changed in a quite unexpected
way: "semodule --verbose" is now a lot more noisy than 2.9. Here is an
example of what I get when rebuilding the policy:
# semodule --verbose -B
Committing changes:
Disabling optional 'ada_optional_6' at
/var/lib/selinux/refpolicy/tmp/modules/400/ada/cil:63
Failed to resolve typeattributeset statement at
/var/lib/selinux/refpolicy/tmp/modules/400/ada/cil:66
Disabling optional 'anaconda_optional_9' at
/var/lib/selinux/refpolicy/tmp/modules/400/anaconda/cil:183
Failed to resolve typeattributeset statement at
/var/lib/selinux/refpolicy/tmp/modules/400/anaconda/cil:189
Disabling optional 'apache_optional_92' at
/var/lib/selinux/refpolicy/tmp/modules/400/apache/cil:3449
Failed to resolve typeattributeset statement at
/var/lib/selinux/refpolicy/tmp/modules/400/apache/cil:3499
...
Such an output could be useful when debugging issues about optional
modules, but they may make other issues harder to find among all the
messages. Would it be possible to hide these specific messages by
default in verbose mode?
I can turn these into CIL_INFO messages rather than CIL_WARN messages. That will
hide them.
Jim
Thanks,
Nicolas
--
James Carter <jwcart2@xxxxxxxxxxxxx>
National Security Agency
