Hi,
In RHEL 7 when using the userdom_unpriv_user_template interface to create a new role, it in turn uses the consoletype_exec interface; but when I attempt to insert a policy compiled with this, it says the type consoletype_exec_t doesn’t exist.
N.B. This works on RHEL 6.
Thanks, Doug
On 10/14/2015 03:44 AM, Douglas Brown wrote:
Hi,
In RHEL 7 when using the userdom_unpriv_user_template interface to create a new role, it in turn uses the consoletype_exec interface; but when I attempt to insert a policy compiled with this, it says the type consoletype_exec_t doesn’t exist.
Nice catch. This is a bug. Could please open a new bug against selinux-policy component?
Thank you.
N.B. This works on RHEL 6.
Thanks, Doug -- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
Good morning,
Was this consoletype_exec_t ever written up and bugged? I'm trying to convert a policy from RHEL6 to RHEL7 and it errors. I've commented out consoletype_exec_t and compiled/installed successfully. A search of my mail archives only turns up the two emails below.
Thank you,
Mark Salowitz, CTR CTS II PaaS Engineer USCG Operations Systems Center
-----Original Message----- From: selinux-bounces@lists.fedoraproject.org [mailto:selinux-bounces@lists.fedoraproject.org] On Behalf Of Miroslav Grepl Sent: Thursday, October 15, 2015 3:26 AM To: Douglas Brown; selinux@lists.fedoraproject.org Subject: Re: RHEL 7 consoletype_exec interface issue
On 10/14/2015 03:44 AM, Douglas Brown wrote:
Hi,
In RHEL 7 when using the userdom_unpriv_user_template interface to create a new role, it in turn uses the consoletype_exec interface; but when I attempt to insert a policy compiled with this, it says the type consoletype_exec_t doesn’t exist.
Nice catch. This is a bug. Could please open a new bug against selinux-policy component?
Thank you.
N.B. This works on RHEL 6.
Thanks, Doug -- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
selinux@lists.fedoraproject.org