Bug 1656085

Summary:	"semanage export" does not export infiniband end ports and keys
Product:	Red Hat Enterprise Linux 8	Reporter:	Vit Mojzis <vmojzis>
Component:	policycoreutils	Assignee:	Petr Lautrbach <plautrba>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Milos Malik <mmalik>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	8.0	CC:	dwalsh, lvrabec, mmalik, plautrba, ssekidde, vmojzis
Target Milestone:	rc	Flags:	pm-rhel: mirror+
Target Release:	8.0
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	policycoreutils-2.8-16.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1657196 (view as bug list)		Environment:
Last Closed:	2019-06-13 23:11:46 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vit Mojzis 2018-12-04 16:24:49 UTC

Description of problem:
"semanage export" does not export infiniband end ports and keys


Steps to Reproduce:
1. Install policy from policycoreutils/Regression/infiniband-support-in-semanage
2. #semanage ibendport -a -t test_ibendport_t -z mlx4_0 2

3. #semanage export

Actual results:
boolean -D
login -D
interface -D
user -D
port -D
node -D
fcontext -D
module -D


Expected results:
boolean -D
login -D
interface -D
user -D
port -D
node -D
fcontext -D
module -D
ibendport -a -t test_ibendport_t -z mlx4_0 2

Additional info:

This issue is also present in Fedora and RHEL 7

Should be one line fix:

selinux/python/semanage/semanage : handleExport
- manageditems = ["boolean", "login", "interface", "user", "port", "node", "fcontext", "module"]
+ manageditems = ["boolean", "login", "interface", "user", "port", "node", "fcontext", "module", "ibendport", "ibpkey"]

Comment 1 Petr Lautrbach 2018-12-05 08:44:55 UTC

https://lore.kernel.org/selinux/20181204164455.13353-1-vmojzis@redhat.com/T/#u