import setroubleshoot-3.3.23-1.el8
This commit is contained in:
parent
74d3afe8ce
commit
c2879f07bc
2
.gitignore
vendored
2
.gitignore
vendored
@ -1 +1 @@
|
|||||||
SOURCES/setroubleshoot-3.3.22.tar.gz
|
SOURCES/setroubleshoot-3.3.23.tar.gz
|
||||||
|
@ -1 +1 @@
|
|||||||
8ab402c866d3120ca6e4d9a0d8c1429693a33e3d SOURCES/setroubleshoot-3.3.22.tar.gz
|
65498823e9c7d6510b60b342f2342c72ff2028bb SOURCES/setroubleshoot-3.3.23.tar.gz
|
||||||
|
@ -1,28 +0,0 @@
|
|||||||
From 2b40f9e254ee2514a5ca113620b6761c0a1d2ae6 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
Date: Sat, 11 Jan 2020 10:19:25 +0100
|
|
||||||
Subject: [PATCH] framework: sepolicy.info() returns a generator, not a list
|
|
||||||
|
|
||||||
Fixes:
|
|
||||||
$ sealert -a ./short.log
|
|
||||||
100% done'generator' object is not subscriptable
|
|
||||||
---
|
|
||||||
framework/src/setroubleshoot/audit_data.py | 2 +-
|
|
||||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
||||||
|
|
||||||
diff --git a/framework/src/setroubleshoot/audit_data.py b/framework/src/setroubleshoot/audit_data.py
|
|
||||||
index 66986a7adfb0..6f0e1e8166ac 100644
|
|
||||||
--- a/framework/src/setroubleshoot/audit_data.py
|
|
||||||
+++ b/framework/src/setroubleshoot/audit_data.py
|
|
||||||
@@ -713,7 +713,7 @@ class AVC:
|
|
||||||
types = wtypes
|
|
||||||
for t in types:
|
|
||||||
if t in all_attributes:
|
|
||||||
- wtypes.extend(info(ATTRIBUTE, t)[0]["types"])
|
|
||||||
+ wtypes.extend(next(info(ATTRIBUTE, t))["types"])
|
|
||||||
|
|
||||||
for t in wtypes:
|
|
||||||
if t in all_types:
|
|
||||||
--
|
|
||||||
2.23.0
|
|
||||||
|
|
@ -1,40 +0,0 @@
|
|||||||
From fc7aad6d9df91eba2445eac53e09372d844f5fd3 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Petr Lautrbach <plautrba@redhat.com>
|
|
||||||
Date: Sat, 11 Jan 2020 20:34:22 +0100
|
|
||||||
Subject: [PATCH] framework: Log plugin exception traceback when log level is
|
|
||||||
DEBUG
|
|
||||||
|
|
||||||
Use the following setting to enable traceback logging when there's a 'Plugin
|
|
||||||
Exception'.
|
|
||||||
|
|
||||||
/etc/setroubleshoot/setroubleshoot.conf:
|
|
||||||
[sealert_log]
|
|
||||||
level = debug
|
|
||||||
---
|
|
||||||
framework/src/setroubleshoot/analyze.py | 3 +++
|
|
||||||
1 file changed, 3 insertions(+)
|
|
||||||
|
|
||||||
diff --git a/framework/src/setroubleshoot/analyze.py b/framework/src/setroubleshoot/analyze.py
|
|
||||||
index e16a47a3791f..43b2484be353 100644
|
|
||||||
--- a/framework/src/setroubleshoot/analyze.py
|
|
||||||
+++ b/framework/src/setroubleshoot/analyze.py
|
|
||||||
@@ -33,6 +33,7 @@ from gi.repository import GObject, GLib
|
|
||||||
import os
|
|
||||||
import time
|
|
||||||
import threading
|
|
||||||
+import traceback
|
|
||||||
from stat import *
|
|
||||||
import sys
|
|
||||||
from functools import cmp_to_key
|
|
||||||
@@ -213,6 +214,8 @@ class Analyze(object):
|
|
||||||
except Exception as e:
|
|
||||||
print(e, file=sys.stderr)
|
|
||||||
syslog.syslog(syslog.LOG_ERR, "Plugin Exception %s " % plugin.analysis_id)
|
|
||||||
+ (v1, v2, v3) = sys.exc_info()
|
|
||||||
+ log_debug(join(traceback.format_tb(v3)))
|
|
||||||
self.plugins.remove(plugin)
|
|
||||||
|
|
||||||
report_receiver.report_problem(siginfo)
|
|
||||||
--
|
|
||||||
2.23.0
|
|
||||||
|
|
@ -1,14 +1,13 @@
|
|||||||
Summary: Helps troubleshoot SELinux problems
|
Summary: Helps troubleshoot SELinux problems
|
||||||
Name: setroubleshoot
|
Name: setroubleshoot
|
||||||
Version: 3.3.22
|
Version: 3.3.23
|
||||||
Release: 2%{?dist}
|
Release: 1%{?dist}
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
URL: https://pagure.io/setroubleshoot
|
URL: https://pagure.io/setroubleshoot
|
||||||
Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz
|
Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz
|
||||||
Source1: %{name}.tmpfiles
|
Source1: %{name}.tmpfiles
|
||||||
# git format-patch -N setroubleshoot-3.3.22 -- framework
|
# git format-patch -N setroubleshoot-3.3.23 -- framework
|
||||||
Patch0001: 0001-framework-sepolicy.info-returns-a-generator-not-a-li.patch
|
# i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done
|
||||||
Patch0002: 0002-framework-Log-plugin-exception-traceback-when-log-le.patch
|
|
||||||
BuildRequires: gcc
|
BuildRequires: gcc
|
||||||
BuildRequires: libcap-ng-devel
|
BuildRequires: libcap-ng-devel
|
||||||
BuildRequires: intltool gettext python3 python3-devel
|
BuildRequires: intltool gettext python3 python3-devel
|
||||||
@ -62,6 +61,7 @@ to user preference. The same tools can be run on existing log files.
|
|||||||
%autosetup -p 2
|
%autosetup -p 2
|
||||||
|
|
||||||
%build
|
%build
|
||||||
|
autoreconf -f
|
||||||
%configure PYTHON=%{__python3} --enable-seappletlegacy=yes --with-auditpluginsdir=/etc/audit/plugins.d
|
%configure PYTHON=%{__python3} --enable-seappletlegacy=yes --with-auditpluginsdir=/etc/audit/plugins.d
|
||||||
make
|
make
|
||||||
|
|
||||||
@ -104,7 +104,7 @@ BuildRequires: python3-devel
|
|||||||
Requires: python3-slip-dbus systemd-python3 >= 206-1
|
Requires: python3-slip-dbus systemd-python3 >= 206-1
|
||||||
Requires: python3-gobject >= 3.11
|
Requires: python3-gobject >= 3.11
|
||||||
Requires: dbus
|
Requires: dbus
|
||||||
Requires: python3-dbus
|
Requires: python3-dbus python3-pydbus
|
||||||
Requires: polkit
|
Requires: polkit
|
||||||
Requires: initscripts
|
Requires: initscripts
|
||||||
Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd
|
Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd
|
||||||
@ -173,10 +173,11 @@ chown -R setroubleshoot:setroubleshoot %{pkgvardatadir}
|
|||||||
%{pkgpythondir}/__pycache__/uuid.cpython*
|
%{pkgpythondir}/__pycache__/uuid.cpython*
|
||||||
%{pkgpythondir}/__pycache__/xml_serialize.cpython*
|
%{pkgpythondir}/__pycache__/xml_serialize.cpython*
|
||||||
%dir %{pkgdatadir}
|
%dir %{pkgdatadir}
|
||||||
%{pkgdatadir}/SetroubleshootFixit.py*
|
%{pkgdatadir}/SetroubleshootFixit.py
|
||||||
%{pkgdatadir}/updater.py*
|
%{pkgdatadir}/SetroubleshootPrivileged.py
|
||||||
%config(noreplace) %{pkgconfigdir}/%{name}.conf
|
%config(noreplace) %{pkgconfigdir}/%{name}.conf
|
||||||
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.Setroubleshootd.conf
|
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.Setroubleshootd.conf
|
||||||
|
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootPrivileged.conf
|
||||||
%attr(0700,setroubleshoot,setroubleshoot) %dir %{pkgvardatadir}
|
%attr(0700,setroubleshoot,setroubleshoot) %dir %{pkgvardatadir}
|
||||||
%ghost %attr(0600,setroubleshoot,setroubleshoot) %{pkgdatabase}
|
%ghost %attr(0600,setroubleshoot,setroubleshoot) %{pkgdatabase}
|
||||||
%ghost %attr(0600,setroubleshoot,setroubleshoot) %{pkgvardatadir}/email_alert_recipients
|
%ghost %attr(0600,setroubleshoot,setroubleshoot) %{pkgvardatadir}/email_alert_recipients
|
||||||
@ -186,6 +187,7 @@ chown -R setroubleshoot:setroubleshoot %{pkgvardatadir}
|
|||||||
%{_mandir}/man8/setroubleshootd.8.gz
|
%{_mandir}/man8/setroubleshootd.8.gz
|
||||||
%config /etc/audit/plugins.d/sedispatch.conf
|
%config /etc/audit/plugins.d/sedispatch.conf
|
||||||
%{_datadir}/dbus-1/system-services/org.fedoraproject.Setroubleshootd.service
|
%{_datadir}/dbus-1/system-services/org.fedoraproject.Setroubleshootd.service
|
||||||
|
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootPrivileged.service
|
||||||
%{_datadir}/polkit-1/actions/org.fedoraproject.setroubleshootfixit.policy
|
%{_datadir}/polkit-1/actions/org.fedoraproject.setroubleshootfixit.policy
|
||||||
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootFixit.conf
|
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootFixit.conf
|
||||||
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootFixit.service
|
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootFixit.service
|
||||||
@ -206,6 +208,26 @@ SELinux troubleshoot legacy applet
|
|||||||
%{_bindir}/seappletlegacy
|
%{_bindir}/seappletlegacy
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Apr 27 2020 Vit Mojzis <vmojzis@redhat.com> - 3.3.23-1
|
||||||
|
- browser: Check return value of Gdk.Screen().get_default() (#1574434)
|
||||||
|
- Improve and unify error messages (#1763982)
|
||||||
|
- setroubleshoot.util: Catch exceptions from sepolicy import
|
||||||
|
- Add dpkg support
|
||||||
|
- Do not refer to hardcoded selinux-policy rpm in signature
|
||||||
|
- Make date/time format locale specific (#1812674)
|
||||||
|
- Improve speed of plugin evaluation (#1794807)
|
||||||
|
- Do not try to report a bug on None package
|
||||||
|
- sealert: Drop unused import slib.dbus.service
|
||||||
|
- Drop updater.py - it's not used and doesn't work
|
||||||
|
- root user doesn't need to use SetroubleshootPrivileged API
|
||||||
|
- Use pydbus, a modern Python dbus API, for SetroubleshootPrivileged
|
||||||
|
- Report bug on a package which owns the related SELinux domain (#1811644)
|
||||||
|
https://pagure.io/setroubleshoot/issue/18
|
||||||
|
- Add Local SELinux policy package version to analyses reports
|
||||||
|
- setroubleshoot.utils.get_rpm_nvr_by_scontext add option to use DBUS method
|
||||||
|
- Export setroubleshoot.utils.get_rpm_nvr_by_scontext via DBUS
|
||||||
|
- setroubleshoot.util: get_rpm_nvr_by_type() and get_rpm_nvr_by_scontext()
|
||||||
|
|
||||||
* Sat Jan 11 2020 Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
|
* Sat Jan 11 2020 Petr Lautrbach <plautrba@redhat.com> - 3.3.22-2
|
||||||
- Log plugin exception traceback when log level is DEBUG
|
- Log plugin exception traceback when log level is DEBUG
|
||||||
- sepolicy.info() returns a generator, not a list (#1784564)
|
- sepolicy.info() returns a generator, not a list (#1784564)
|
||||||
|
Loading…
Reference in New Issue
Block a user