Issue #10084 has been updated by James Turnbull.

Status changed from Accepted to Needs Decision
Assignee set to Sean Millichamp

Sean and Mike - do you have a view on this?
----------------------------------------
Bug #10084: Debug output includes way too much selinux details.
https://projects.puppetlabs.com/issues/10084

Author: Jo Rhett
Status: Needs Decision
Priority: Normal
Assignee: Sean Millichamp
Category: 
Target version: 2.7.x
Affected Puppet version: 2.6.11
Keywords: 
Branch: 


When I run "puppet agent --debug" I get about 1400 lines of selinux details, 
and about 120 lines of actual debug.  These aren't actually changes to selinux 
attributes, just noting the selinux attribute of every file opened.

    debug: /File[/etc/puppet/auth.conf]/seluser: Found seluser default 
'system_u' for /etc/puppet/auth.conf
    debug: /File[/etc/puppet/auth.conf]/selrole: Found selrole default 
'object_r' for /etc/puppet/auth.conf
    debug: /File[/etc/puppet/auth.conf]/seltype: Found seltype default 'etc_t' 
for /etc/puppet/auth.conf
    debug: /File[/etc/snmp/snmpd.conf]/seluser: Found seluser default 
'system_u' for /etc/snmp/snmpd.conf
    debug: /File[/etc/snmp/snmpd.conf]/selrole: Found selrole default 
'object_r' for /etc/snmp/snmpd.conf
    debug: /File[/etc/snmp/snmpd.conf]/seltype: Found seltype default 'etc_t' 
for /etc/snmp/snmpd.conf
    debug: /File[/etc/nsswitch.conf]/seluser: Found seluser default 'system_u' 
for /etc/nsswitch.conf
    debug: /File[/etc/nsswitch.conf]/selrole: Found selrole default 'object_r' 
for /etc/nsswitch.conf
    debug: /File[/etc/nsswitch.conf]/seltype: Found seltype default 'etc_t' for 
/etc/nsswitch.conf

I believe that this is unnecessary debug and makes it very difficult to track 
down other problems.  Would Puppetlabs accept a feature request to move this 
selinux attribute echoing to higher or different debug level?


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to