Hide Forgot
+++ This bug was initially created as a clone of Bug #1124345 +++ Description of problem: If the other store contains a boolean which does not exist in the active policy semanage boolean -l produces an error. This is caused by getting current statue for the boolean which actually does not exist in active policy. Therefore I would propose to changes the output of semanage boolean -l so it put e.g. '-' in the 'state' column if listing non-active store as it is misleading anyway. # rpm -qa | grep -e selinux-policy -e policycoreutils selinux-policy-devel-3.13.1-60.el7.noarch selinux-policy-mls-3.13.1-102.el7.noarch policycoreutils-newrole-2.5-9.el7.x86_64 policycoreutils-2.5-9.el7.x86_64 policycoreutils-devel-2.5-9.el7.x86_64 selinux-policy-3.13.1-102.el7.noarch selinux-policy-targeted-3.13.1-102.el7.noarch policycoreutils-python-2.5-9.el7.x86_64 # cat > mypolicy.cil << EOF (boolean xyz false) EOF # semodule -i mypolicy.cil -s mls # seinfo -b /etc/selinux/mls/policy/policy.30 | grep xyz xyz # semanage boolean -l -S mls ... irssi_use_full_network (off , off) Allow the Irssi IRC Client to connect to any port, and to bind to any unreserved port. mozilla_plugin_use_bluejeans (off , off) Allow mozilla plugin to use Bluejeans. OSError: No such file or directory
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2160