Bug 1028202

Summary:	semanage permissive -a with a bad type name leaves invalid te file
Product:	Red Hat Enterprise Linux 6	Reporter:	Ted X Toth <txtoth>
Component:	policycoreutils	Assignee:	Miroslav Grepl <mgrepl>
Status:	CLOSED ERRATA	QA Contact:	Eduard Benes <ebenes>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	6.4	CC:	dwalsh, ebenes, eparis, mgrepl
Target Milestone:	rc
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	policycoreutils-2.0.83-19.43.el6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-10-14 08:04:33 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ted X Toth 2013-11-07 21:54:41 UTC

Description of problem:
If you do run for example 'semanage permissive -a permissive' an invalid te file will be generated a left in /var/lib/selinux (I think) and then if you try to run 
'semanage permissive -a <type>' again it will fail because it tries to compile the bad te file previously generated.

Version-Release number of selected component (if applicable):
policycoreutils-python-2.0.83-19.30.el6.x86_64


How reproducible:


Steps to Reproduce:
1.semanage permissive -a permissive
2.semanage permissive -a secadm_t
3.

Actual results:
step 2 fails because step 1 failed

Expected results:


Additional info:

Comment 2 RHEL Program Management 2013-11-10 23:15:12 UTC

This request was not resolved in time for the current release.
Red Hat invites you to ask your support representative to
propose this request, if still desired, for consideration in
the next release of Red Hat Enterprise Linux.

Comment 3 Daniel Walsh 2013-11-12 14:18:05 UTC

Fixed in  policycoreutils-2.1.14-89.el7

Comment 4 Miroslav Grepl 2014-04-23 12:45:43 UTC

Yes, we have

#semanage permissive -a permissive
ValueError: permissive is not a domain type

Comment 5 RHEL Program Management 2014-04-23 12:50:57 UTC

This request was evaluated by Red Hat Product Management for
inclusion in a Red Hat Enterprise Linux release.  Product
Management has requested further review of this request by
Red Hat Engineering, for potential inclusion in a Red Hat
Enterprise Linux release for currently deployed products.
This request is not yet committed for inclusion in a release.

Comment 8 Michal Trunecka 2014-07-04 07:07:30 UTC

Now it seems to be broken a bit:

(even without trying the command with nonexisting type before)

# rpm -qa policycoreutils\*
policycoreutils-python-2.0.83-19.41.el6.x86_64
policycoreutils-2.0.83-19.41.el6.x86_64
# semanage permissive -a httpd_t
/usr/sbin/semanage: httpd_t is not a domain type

Comment 9 Miroslav Grepl 2014-07-04 08:19:15 UTC

(In reply to Michal Trunecka from comment #8)
> Now it seems to be broken a bit:
> 
> (even without trying the command with nonexisting type before)
> 
> # rpm -qa policycoreutils\*
> policycoreutils-python-2.0.83-19.41.el6.x86_64
> policycoreutils-2.0.83-19.41.el6.x86_64
> # semanage permissive -a httpd_t
> /usr/sbin/semanage: httpd_t is not a domain type

strange, it works on Fedora with the same patch. Need to re-check it.

Comment 10 Miroslav Grepl 2014-07-04 12:08:42 UTC

Ok, I found a bug.

Comment 14 errata-xmlrpc 2014-10-14 08:04:33 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1569.html