#19 Fix summary and "if" text for AVCs with unknown target path
Closed by plautrba. Opened by vmojzis.
vmojzis/setroubleshoot stable  into  stable

Download 19.patch

AVCs with unknown target path were described eg. as follows:

SELinux is preventing /usr/bin/dmesg from syslog_read access on the
system Unknown.

* Plugin catchall (100. confidence) suggests


If you believe that dmesg should be allowed syslog_read access on the
Unknown system by default.

Replace the confusing descriptions by:

SELinux is preventing /usr/bin/dmesg from syslog_read access on the
system labeled system_label_t.

* Plugin catchall (100. confidence) suggests


If you believe that dmesg should be allowed syslog_read access on the
system labeled system_label_t by default.

The requirement for 3-tuple (catchall.py: 53) guarantees backwards
compatibility with AVCs that are already in the setroubleshoot database.

Resolves: rhbz#1437772

1 new commit added

  • plugins/bind_ports: Do not use when there are no allowed_target_types

Both patches should be applied to master branch as well.

Merged

Pull-Request has been closed by plautrba

Metadata