rpms/setroubleshoot
7
0
Fork 0
Code Issues Pull Requests Releases Activity
454 Commits 7 Branches 40 Tags 1 MiB
9dd21d3b55
Commit Graph

454 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Timothée Ravier
9dd21d3b55 Install sysusers configuration 
User and group are now created by the macro but the configuration file
should be installed on the systemd too:
https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/#_dynamic_allocation

Also remove the Requires(pre) for useradd & groupadd as it is handled by
the %sysusers_create_compat macro:
https://src.fedoraproject.org/rpms/systemd/blob/rawhide/f/macros.sysusers
 2022-02-09 12:21:17 +01:00
Petr Lautrbach
37c8e795f1 setroubleshoot-3.3.28-2 
- Use %sysusers_create_compat instead of useradd
- Set right ownership on /var/lib/setroubleshoot
 2022-02-08 16:50:11 +01:00
Petr Lautrbach
73eee022be Use %sysusers_create_compat instead of useradd 
See https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2046458
 2022-02-08 16:47:26 +01:00
Petr Lautrbach
e53fbd0923 Set right ownership on /var/lib/setroubleshoot 
A system which uses rpm ostree doesn't install rpms but images which are
pre-created in a build system. There's no guarantee that the build
system has the same uid/gid mapping for setroubleshoot as the local system.

systemd-tmpfiles's 'Z' type recursivelly sets the user and group
ownership on every reboot.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2012943
 2022-02-08 16:32:38 +01:00
Petr Lautrbach
db9ec84c0b setroubleshoot-3.3.28 2022-02-08 14:49:57 +01:00
Petr Lautrbach
2c88c3cee0 setroubleshoot-3.3.27-2 
- Improve DSP module reporting
- Require initscripts-service - /sbin/service
 2022-01-19 16:31:46 +01:00
Petr Lautrbach
7c46629c9c /sbin/service is in initscripts-service now 2022-01-19 14:44:19 +01:00
Petr Lautrbach
05aacc00c1 Improve DSP module reporting 2022-01-19 13:40:47 +01:00
Petr Lautrbach
58c30239f8 %{_tmpfilesdir} macro is provided by systemd-rpm-macros 2022-01-13 16:32:50 +01:00
Petr Lautrbach
242da2b976 setroubleshoot-3.3.27 2022-01-13 15:12:30 +01:00
Vit Mojzis
38d9ec3188 Update instructions for working with translations 2022-01-13 13:59:55 +01:00
Timothée Ravier
46d862d45c Remove deprecated init script 2021-11-11 10:30:51 +01:00
Petr Lautrbach
85a820031f setroubleshoot-3.3.26-5 
- Improve sedispatch performance

Requires audit >= 3.0.1

- Improve Python 3.10 compatibility
  https://pagure.io/setroubleshoot/issue/58
 2021-07-27 11:41:38 +02:00
Fedora Release Engineering
446ccd7b9c - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-23 17:25:01 +00:00
Petr Lautrbach
5b9a88224f setroubleshoot-3.3.26-3 
- Fix file mode of email_alert_recipients
 2021-07-02 14:33:48 +02:00
Python Maint
420234f39a Rebuilt for Python 3.10 2021-06-04 21:14:44 +02:00
Petr Lautrbach
9eb5fb83b3 setroubleshoot-3.3.26 
- Fix plugin exception reporting
- Update translations
- Stop SetroubleshootFixit after 10 seconds of inactivity
- Do not use Python slip package
 2021-04-15 11:46:34 +02:00
Petr Lautrbach
e538407cbb setroubleshoot-3.3.25-1 
- Use Python dasbus instead of pydbus
- Optimize get_rpm_nvr_by_type by adding a cache
- Update translations
 2021-03-10 20:08:14 +01:00
Vit Mojzis
c42ca71e46 setroubleshoot-3.3.24-4 
- sealert: exit on any connection close
 2021-02-02 17:26:53 +01:00
Fedora Release Engineering
179d13d432 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-27 20:15:22 +00:00
Vit Mojzis
9718e5e570 setroubleshoot-3.3.24-2 
- Optimize get_rpm_nvr_by_type by adding a cache
- Stop building seappletlegacy
 2021-01-19 17:18:06 +01:00
Vit Mojzis
714bed8c42 Stop building seappletlegacy 
setroubleshoot-legacy is not being shipped in RHEL
See: https://errata.devel.redhat.com/advisory/45364/builds

Resolves: rhbz#1878792
 2021-01-16 21:15:36 +01:00
Petr Lautrbach
e961adbdaf Add make to BuildRequires 2020-12-14 12:18:54 +01:00
Petr Lautrbach
beb2a71e3f setroubleshoot-3.3.24-1 
- Add 'fur' into shipped locales
- Update translations
- Log full reports with correct syslog identifier
- Cancel pending alarm during AVC analyses
 2020-10-13 10:10:10 +02:00
Vit Mojzis
5886bbdd11 tests/Regression/Report-bugs: Add new test RPM 2020-08-05 18:05:15 +02:00
Fedora Release Engineering
3502f40970 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-08-01 09:02:16 +00:00
Fedora Release Engineering
eed1173ddb - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-29 10:35:09 +00:00
Tom Stellard
6edc7d2d0f Use make macros 
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
 2020-07-14 14:08:30 +00:00
Petr Lautrbach
ce0b7236a0 Cancel pending alarm during AVC analyses 
Previously the alarm was reset only in main DBUS thread and only when a new AVC
appeared. In cases when there were several AVC messages in short time, analyses
could take more than a default timeout and later analyses were not saved to
the database. Now we cancel pending timeouts before analyze_avc() and reset the
timeout back to default when it's done.

Fixes:
    $ journalctl | grep 'sealert -l'
    setroubleshoot[314039]: SELinux is preventing bash from search access on the directory .local. For complete SELinux messages run: sealert -l ccf3307a-f4ab-4584-87c6-63884daf841a

    $ sealert -l ccf3307a-f4ab-4584-87c6-63884daf841a
    Error
    query_alerts error (1003): id (ccf3307a-f4ab-4584-87c6-63884daf841a) not found
 2020-05-27 13:59:07 +02:00
Petr Lautrbach
6882e142b6 tests: Add public_content test 
Does public_content plugin work as expected with the current
setroubleshoot-server?
 2020-05-27 13:58:28 +02:00
Miro Hrončok
4810120f39 Rebuilt for Python 3.9 2020-05-26 03:50:21 +02:00
Vit Mojzis
01e036ef43 tests: Add Regression/Report-bugs-on-corresponding-components 
Policy packages to be used in the test are specified using
TEST_PACKAGES variable in the Makefile. Corresponding avc_<package_name>
file has to exist for each such package.

avc_<package_name> files contain AVCs with "scontext" domain defined
in policy module installed by <package_name> RPM. The test verifies that
setroubleshoot is able to properly identify the source package.
 2020-05-22 13:17:51 +02:00
Vit Mojzis
bb3d75bf71 tests/sealert-s-traceback-invalid-display: remove invalid argument 
The argument was never used since sealert always crashed on GUI setup,
but it iss still better to remove it to avoid issues in the future.
 2020-05-13 16:44:48 +02:00
Vit Mojzis
8e35736477 tests: Add Regression/sealert-s-traceback-invalid-display 
This test should make sure that "sealert -s" does not traceback
with DISPLAY set to invalid value.
 2020-04-28 15:56:44 +02:00
Vit Mojzis
9c9318679f setroubleshoot-3.3.23-1 
- browser: Check return value of Gdk.Screen().get_default()
- Improve and unify error messages
- setroubleshoot.util: Catch exceptions from sepolicy import
- Add dpkg support
- Do not refer to hardcoded selinux-policy rpm in signature
- Make date/time format locale specific
- Improve speed of plugin evaluation
 2020-04-21 22:50:41 +02:00
Petr Lautrbach
3242bcadb0 setroubleshoot-3.3.22-6.fc33 
- Do not try to report a bug on None package (#1809801)
 2020-03-04 20:26:36 +01:00
Petr Lautrbach
678fd233e3 setroubleshoot-3.3.22-5 
- root user doesn't need to use SetroubleshootPrivileged API
 2020-02-28 13:37:14 +01:00
Petr Lautrbach
e2dfff1666 setroubleshoot-3.3.22-4 
- sealert to report a bug on a package which owns the related SELinux domain
  https://pagure.io/setroubleshoot/issue/18
 2020-02-27 15:04:17 +01:00
Fedora Release Engineering
4759318f5d - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-30 23:17:11 +00:00
Petr Lautrbach
61171038c2 setroubleshoot-3.3.22-2 
- Log plugin exception traceback when log level is DEBUG
- sepolicy.info() returns a generator, not a list (#1784564)
 2020-01-11 21:06:38 +01:00
Petr Lautrbach
2751df1935 no-plugin-exception-during-analyses: Fix indentation 2020-01-11 19:46:39 +01:00
Petr Lautrbach
e4ba63e00b no-plugin-exception-during-analyses: Test sealert -a ./short.log 
short.log exposes a problem with Plugin Exception in catchall_labels plugin

Covers "'generator' object is not subscriptable" in sealert output:

    $ sealert -a ./short.log
    100% done'generator' object is not subscriptable
    100% done
    found 2 alerts in ./short.log
    ...
 2020-01-11 19:28:15 +01:00
Petr Lautrbach
77e7a0320c tests: Few no-plugin-exception-during-analyses improvements 
- when first grep fails print journal as well
- check for setroubleshoot-server instead of setroubleshoot
- improve grep assert to match "passwd" and "/usr/bin/passwd"
 2020-01-06 16:05:21 +01:00
Petr Lautrbach
0340721f20 tests: Add Regression/no-plugin-exception-during-analyses to CI tests 2020-01-06 09:52:59 +01:00
Petr Lautrbach
8937bc78c8 tests: Report setroubleshoot-server version during no-plugin-exception-during-analyses 2020-01-06 09:49:41 +01:00
Petr Lautrbach
2602b87ed0 tests: Does setroubleshoot report any 'Plugin Exception' during analyses? 
This test should cover cases when setroubleshoot reports "Plugin Exception"
during analyses, see https://bugzilla.redhat.com/show_bug.cgi?id=1784564

Example log with the reported problem:
    setroubleshoot[834]: Plugin Exception catchall_labels
    setroubleshoot[834]: Plugin Exception file
    setroubleshoot[834]: Plugin Exception openvpn
 2020-01-03 15:57:56 +01:00
Petr Lautrbach
1bbd702684 setroubleshoot-3.3.22 
- sepolicy.info() returns a generator, not a list (#1784564)
 2020-01-02 16:16:57 +01:00
Vit Mojzis
82e602850c setroubleshoot-3.3.21-1 
- Fix AVC.__typeMatch to handle aliases properly
- Handle sockets with abstract path properly (#1775135)
 2019-12-11 16:39:29 +01:00
Vit Mojzis
7573f5f239 tests: Add Regression/embedded-null-byte-in-audit-records 2019-12-11 16:16:13 +01:00
Miro Hrončok
f13e6870bb Rebuilt for Python 3.8.0rc1 (#1748018) 2019-10-03 14:38:42 +02:00