Bugzilla (bugzilla.redhat.com) will be under maintenance for infrastructure upgrades and will not be available on July 31st between 12:30 AM - 05:30 AM UTC. We appreciate your understanding and patience. You can follow status.redhat.com for details.
Bug 1656085 - "semanage export" does not export infiniband end ports and keys
Summary: "semanage export" does not export infiniband end ports and keys
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: policycoreutils
Version: 8.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: 8.0
Assignee: Petr Lautrbach
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-12-04 16:24 UTC by Vit Mojzis
Modified: 2019-06-13 23:11 UTC (History)
6 users (show)

Fixed In Version: policycoreutils-2.8-16.el8
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1657196 (view as bug list)
Environment:
Last Closed: 2019-06-13 23:11:46 UTC
Type: Bug
Target Upstream Version:


Attachments (Terms of Use)

Description Vit Mojzis 2018-12-04 16:24:49 UTC
Description of problem:
"semanage export" does not export infiniband end ports and keys


Steps to Reproduce:
1. Install policy from policycoreutils/Regression/infiniband-support-in-semanage
2. #semanage ibendport -a -t test_ibendport_t -z mlx4_0 2

3. #semanage export

Actual results:
boolean -D
login -D
interface -D
user -D
port -D
node -D
fcontext -D
module -D


Expected results:
boolean -D
login -D
interface -D
user -D
port -D
node -D
fcontext -D
module -D
ibendport -a -t test_ibendport_t -z mlx4_0 2

Additional info:

This issue is also present in Fedora and RHEL 7

Should be one line fix:

selinux/python/semanage/semanage : handleExport
- manageditems = ["boolean", "login", "interface", "user", "port", "node", "fcontext", "module"]
+ manageditems = ["boolean", "login", "interface", "user", "port", "node", "fcontext", "module", "ibendport", "ibpkey"]


Note You need to log in before you can comment on or make changes to this bug.