Bug 2183106

Summary: With passt-selinux installed, installation of selinux-policy-devel reports harmless, but confusing syntax errors
Product: Red Hat Enterprise Linux 9 Reporter: Stefano Brivio <sbrivio>
Component: passtAssignee: Stefano Brivio <sbrivio>
Status: CLOSED ERRATA QA Contact: Lei Yang <leiyang>
Severity: medium Docs Contact:
Priority: medium    
Version: 9.2CC: jinzhao, juzhang, leiyang, lvivier, yalzhang, ymankad, zhguo
Target Milestone: rcKeywords: CustomerScenariosInitiative, Triaged, ZStream
Target Release: 9.3Flags: pm-rhel: mirror+
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: passt-0^20230222.g4ddbcb9-4.el9 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2190510 (view as bug list) Environment:
Last Closed: 2023-11-07 08:32:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2190510    

Description Stefano Brivio 2023-03-30 12:05:27 UTC
When passt-selinux is installed, the "pasta.if" SELinux interface file, currently unused, which I created upstream as an example, is also installed. That file happens to contain syntax errors, which show up if selinux-policy-devel is installed with that file already present:

/usr/share/selinux/devel/include/contrib/pasta.if: Syntax error on line 11 ' [type=SQUOTE]
/usr/share/selinux/devel/include/contrib/pasta.if: Syntax error on line 17 ' [type=SQUOTE]
/usr/share/selinux/devel/include/contrib/pasta.if: Syntax error on line 25 ' [type=SQUOTE]

We need an equivalent of upstream commit:

  https://passt.top/passt/commit/?id=387f4aca7477ee630fe3c261a19f5f1a9055bfe5
  fedora: Don't install useless SELinux interface file for pasta

Comment 6 Lei Yang 2023-05-26 02:19:11 UTC
==>Reproduced this problem on passt-0^20230222.g4ddbcb9-2.el9_2.x86_64

=>Test Version
passt-0^20230222.g4ddbcb9-2.el9_2.x86_64
passt-selinux-0^20230222.g4ddbcb9-2.el9_2.noarch

=>Test steps
1. Install passt-selinux on the host first
2. Then install selinux-policy-devel packages it will print the following error messages:
/usr/share/selinux/devel/include/contrib/pasta.if: Syntax error on line 11 ' [type=SQUOTE]
/usr/share/selinux/devel/include/contrib/pasta.if: Syntax error on line 17 ' [type=SQUOTE]
/usr/share/selinux/devel/include/contrib/pasta.if: Syntax error on line 25 ' [type=SQUOTE]

==> So reproduced this problem on passt-0^20230222.g4ddbcb9-2.el9_2.x86_64

==> Test the same scenario on the passt-0^20230222.g4ddbcb9-3.el9

=>Test Version:
passt-0^20230222.g4ddbcb9-3.el9.x86_64
passt-selinux-0^20230222.g4ddbcb9-3.el9.noarch

=>Test Steps:
1. Install  passt-selinux on the host first
2. Then install selinux-policy-devel packages, there is no error messages.

==>Based on the above test result, this problem has been fixed very well on passt-0^20230222.g4ddbcb9-3.el9.x86_64

Comment 9 Lei Yang 2023-06-01 01:02:52 UTC
Based on the Comment 6 result, move to "VERIFIED".

Comment 11 errata-xmlrpc 2023-11-07 08:32:38 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (passt bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:6430