Issue #10084 has been updated by Jacob Helwig.

Status changed from Unreviewed to Needs Decision
Assignee set to Jacob Helwig

We'd need to create a new log level to handle this, and have a way of exposing 
it to the command-line.

Right now, debug is the most verbose log level we have (from 
`lib/puppet/util/log.rb`):
    @levels = [:debug,:info,:notice,:warning,:err,:alert,:emerg,:crit]

The current setup of `--verbose` and `--debug` don't quite play well with 
having multiple debugging levels.  I could see changing `--debug` to take an 
optional debug level (though I don't think this currently plays well with our 
option handling).

Even better (to me, anyway) would be if we deprecated the dual 
`--verbose`/`--debug` flags for a single `--verbose [level]` flag (possibly 
supporting the `-vvvv` style of "more 'v's == more verbose".

In any case, we'd need to come up with another log level to move the output to, 
and a way to allow people to view it from the command line (preferably without 
adding yet another verbosity related flag).
----------------------------------------
Bug #10084: Debug output includes way too much selinux details.
https://projects.puppetlabs.com/issues/10084

Author: Jo Rhett
Status: Needs Decision
Priority: Normal
Assignee: Jacob Helwig
Category: 
Target version: 
Affected Puppet version: 2.6.11
Keywords: 
Branch: 


When I run "puppet agent --debug" I get about 1400 lines of selinux details, 
and about 120 lines of actual debug.  These aren't actually changes to selinux 
attributes, just noting the selinux attribute of every file opened.

    debug: /File[/etc/puppet/auth.conf]/seluser: Found seluser default 
'system_u' for /etc/puppet/auth.conf
    debug: /File[/etc/puppet/auth.conf]/selrole: Found selrole default 
'object_r' for /etc/puppet/auth.conf
    debug: /File[/etc/puppet/auth.conf]/seltype: Found seltype default 'etc_t' 
for /etc/puppet/auth.conf
    debug: /File[/etc/snmp/snmpd.conf]/seluser: Found seluser default 
'system_u' for /etc/snmp/snmpd.conf
    debug: /File[/etc/snmp/snmpd.conf]/selrole: Found selrole default 
'object_r' for /etc/snmp/snmpd.conf
    debug: /File[/etc/snmp/snmpd.conf]/seltype: Found seltype default 'etc_t' 
for /etc/snmp/snmpd.conf
    debug: /File[/etc/nsswitch.conf]/seluser: Found seluser default 'system_u' 
for /etc/nsswitch.conf
    debug: /File[/etc/nsswitch.conf]/selrole: Found selrole default 'object_r' 
for /etc/nsswitch.conf
    debug: /File[/etc/nsswitch.conf]/seltype: Found seltype default 'etc_t' for 
/etc/nsswitch.conf

I believe that this is unnecessary debug and makes it very difficult to track 
down other problems.  Would Puppetlabs accept a feature request to move this 
selinux attribute echoing to higher or different debug level?


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to