Bug 1392394

Summary: checkmodule segfaults when -b and -m are used at the same time
Product: Red Hat Enterprise Linux 6 Reporter: Milos Malik <mmalik>
Component: checkpolicyAssignee: Petr Lautrbach <plautrba>
Status: CLOSED WONTFIX QA Contact: Milos Malik <mmalik>
Severity: high Docs Contact:
Priority: medium    
Version: 6.8CC: lvrabec, mgrepl, mmalik, pgraner, plautrba
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-10-02 14:24:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Milos Malik 2016-11-07 12:33:31 UTC 
Description of problem:

Version-Release number of selected component (if applicable):
checkpolicy-2.0.22-1.el6.x86_64
selinux-policy-3.7.19-292.el6.noarch
selinux-policy-mls-3.7.19-292.el6.noarch
selinux-policy-targeted-3.7.19-292.el6.noarch

How reproducible:
* always

Steps to Reproduce:
# checkmodule -M -m -b -o testmod.mod /etc/selinux/mls/policy/policy.*
checkmodule:  loading policy configuration from /etc/selinux/mls/policy/policy.24
libsepol.policydb_index_others: security:  8 users, 14 roles, 3428 types, 206 bools
libsepol.policydb_index_others: security: 16 sens, 1024 cats
libsepol.policydb_index_others: security:  81 classes, 224696 rules, 256931 cond rules
checkmodule:  policy configuration loaded
checkmodule:  writing binary representation (version 10) to testmod.mod
Segmentation fault (core dumped)
# checkmodule -M -m -b -o testmod.mod /etc/selinux/targeted/policy/policy.*
checkmodule:  loading policy configuration from /etc/selinux/targeted/policy/policy.24
libsepol.policydb_index_others: security:  9 users, 12 roles, 4211 types, 236 bools
libsepol.policydb_index_others: security: 1 sens, 1024 cats
libsepol.policydb_index_others: security:  81 classes, 306596 rules, 329732 cond rules
checkmodule:  policy configuration loaded
checkmodule:  writing binary representation (version 10) to testmod.mod
Segmentation fault (core dumped)
#

Actual results:
* segfault

Expected results:
* no segfault
Comment 3 Petr Lautrbach 2017-10-02 14:24:17 UTC 
Red Hat Enterprise Linux 6 transitioned to the Production 3 Phase on May 10, 2017.  During the Production 3 Phase, Critical impact Security Advisories (RHSAs) and selected Urgent Priority Bug Fix Advisories (RHBAs) may be released as they become available.

The official life cycle policy can be reviewed here:
http://redhat.com/rhel/lifecycle

This issue does not appear to meet the inclusion criteria for the Production Phase 3 and will be marked as CLOSED/WONTFIX. If this remains a critical requirement, please contact Red Hat Customer Support to request a re-evaluation of the issue, citing a clear business justification.  Red Hat Customer Support can be contacted via the Red Hat Customer Portal at the following URL:

https://access.redhat.com