| Summary: | semanage permissive -l tracebacks if SELinux is disabled | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Milos Malik <mmalik> |
| Component: | policycoreutils | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED ERRATA | QA Contact: | Milos Malik <mmalik> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 6.2 | CC: | dwalsh |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | policycoreutils-2.0.83-19.13.el6 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-12-06 15:31:05 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
Milos can you add the following to the end of semanage to make sure it works. I don't have a disabled machine to test on. except RuntimeError, error: errorExit(error.args[1]) It didn't work when error.args[1] was used, but it works when error.args[0] is used. # tail -n 3 /usr/sbin/semanage except RuntimeError, error: errorExit(error.args[0]) # sestatus SELinux status: disabled # semanage permissive -l /usr/sbin/semanage: No default policy found. # Great that is what I was looking for. Fixed in policycoreutils-2.0.83-19.13.el6 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2011-1637.html |
Description of problem: Version-Release number of selected component (if applicable): policycoreutils-2.0.83-19.12.el6.i686 policycoreutils-python-2.0.83-19.12.el6.i686 policycoreutils-sandbox-2.0.83-19.12.el6.i686 policycoreutils-gui-2.0.83-19.12.el6.i686 policycoreutils-newrole-2.0.83-19.12.el6.i686 How reproducible: always Steps to Reproduce: [root@rhel62 ~]# sestatus SELinux status: disabled [root@rhel62 ~]# semanage permissive -l Traceback (most recent call last): File "/usr/sbin/semanage", line 564, in <module> process_args(sys.argv[1:]) File "/usr/sbin/semanage", line 383, in process_args OBJECT.list(heading, locallist) File "/usr/lib/python2.6/site-packages/seobject.py", line 341, in list all = map(lambda y: y["name"], filter(lambda x: x["permissive"], setools.seinfo(setools.TYPE))) File "/usr/lib/python2.6/site-packages/setools/__init__.py", line 49, in seinfo dict_list = _seinfo.seinfo(setype, name) RuntimeError: No default policy found. [root@rhel62 ~]# echo $? 1 [root@rhel62 ~]# Expected results: * either the tool can cope with disabled SELinux and displays permissive domains as expected * or the tool shows "SELinux is disabled" message as other tools do