Bug 826524

Summary: sesearch works but still prints WARNING message
Product: Red Hat Enterprise Linux 7 Reporter: Milos Malik <mmalik>
Component: kernelAssignee: Eric Paris <eparis>
Status: CLOSED NOTABUG QA Contact: Red Hat Kernel QE team <kernel-qe>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.0   
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-08-05 18:32:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Milos Malik 2012-05-30 12:21:13 UTC 
Description of problem:
What's the purpose of the WARNING message?

Version-Release number of selected component (if applicable):
setools-libs-3.3.7-22.el7.x86_64
setools-libs-tcl-3.3.7-22.el7.x86_64
setools-libs-python-3.3.7-22.el7.x86_64
setools-console-3.3.7-22.el7.x86_64
setools-3.3.7-22.el7.x86_64
setools-gui-3.3.7-22.el7.x86_64

How reproducible:
always

Steps to Reproduce:
# sesearch --auditallow 1>/dev/null
WARNING: Policy would be downgraded from version 27 to 26.
# sesearch --neverallow 1>/dev/null
WARNING: Policy would be downgraded from version 27 to 26.
ERROR: Cannot get avrules: Neverallow rules requested but not available
# sesearch --allow 1>/dev/null
WARNING: Policy would be downgraded from version 27 to 26.
# sesearch --dontaudit 1>/dev/null
WARNING: Policy would be downgraded from version 27 to 26.
#
  
Actual results:
* WARNING message shows up

Expected results:
* WARNING message disappeared
Comment 1 Daniel Walsh 2012-05-30 13:27:51 UTC 
We need to get an updated kernel that supports policy 27.
Comment 2 Eric Paris 2012-05-30 13:44:35 UTC 
Should be fixed in the 3.5 kernels currently available in rawhide.  I'll try to figure out where RHEL7 is going to end up so I can figure out how to handle this bug.
Comment 4 Eric Paris 2013-08-05 18:32:53 UTC 
RHEL7 uses a new enough kernel.