Bug 846134

Summary: audit2allow only allows letters and numbers in module names which makes it hard to make descriptive and readable module names
Product: Red Hat Enterprise Linux 5 Reporter: Aleksey Tsalolikhin <atsaloli.tech>
Component: policycoreutilsAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED NEXTRELEASE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 5.10CC: dwalsh, mmalik
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-03-19 15:36:02 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Aleksey Tsalolikhin 2012-08-06 23:14:25 UTC 
Description of problem:

audit2allow  only allows letters and numbers in module names which makes it hard to make descriptive and readable module names


Version-Release number of selected component (if applicable):

policycoreutils-1.33.12-14.8.el5

How reproducible:

# audit2allow -M allow_Httpd_To_Connect_To_Unix_Stream_Sockets_And_To_Write_To_Socket_Files < audit.log
only letters and numbers allowed in module names
#

Steps to Reproduce:
1. try to make a module that has a name containing underscores

  
Actual results:


Exits with error:  only letters and numbers allowed in module names

So I have to take out underscores and get a hard to read name, like:

allowHttpdToConnectToUnixStreamSocketsAndToWriteToSocketFiles 

Expected results:  an easy to read name.


Additional info:  Is it possible to add underscores to the allowed characters set for module names, please?
Comment 1 Milos Malik 2012-08-07 07:15:17 UTC 
Both '-' and '_' would be useful.
Comment 2 Daniel Walsh 2012-08-13 20:22:16 UTC 
This is allowed in Fedora.
Comment 3 Miroslav Grepl 2013-03-19 15:36:02 UTC 
Going to close it as NEXTRELEASE. We have it in RHEL6.