Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title Branan Riley updated an issue Puppet / PUP-6908 selmodule syncversion => false behavior incorrect Change By: Branan Riley Labels: linux selinux triaged type_and_provider Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title Maggie Dreyer updated an issue Puppet / PUP-6908 selmodule syncversion => false behavior incorrect Change By: Maggie Dreyer Labels: selinux triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title Thomas Mueller commented on PUP-6908 Re: selmodule syncversion => false behavior incorrect Jordan Conway RedHat re-introduces the version number as a bugfix update in RHEL 7.3: https://bugzilla.redhat.com/show_bug.cgi?id=1395733 https://bugzilla.redhat.com/show_bug.cgi?id=1392573 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title
Jordan Conway commented on PUP-6908
Re: selmodule syncversion => false behavior incorrect
Confirming, here's the hacky workaround I put in my base profile that quiets things in the meantime. Similar could be used for Fedora >=23 but I don't have any Fedora machines.
if $::operatingsystemrelease >= '7.3' {
Selmodule <|tag == 'selinux::module::redhat'|> { syncversion => undef }
}
Add Comment
This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https:/
Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title Josh Cooper updated an issue Puppet / PUP-6908 selmodule syncversion => false behavior incorrect Change By: Josh Cooper Team: Agent & Platform Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title Branan Riley updated an issue Puppet / PUP-6908 selmodule syncversion => false behavior incorrect Change By: Branan Riley Labels: selinux Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-6908) selmodule syncversion => false behavior incorrect
Title: Message Title AJ Zmudosky created an issue Puppet / PUP-6908 selmodule syncversion => false behavior incorrect Issue Type: Bug Assignee: Unassigned Components: Types and Providers Created: 2016/11/09 3:31 PM Environment: Puppet Open Source 3.8.5 (Issue applies to 3.8.5 and latest version of Puppet) Priority: Normal Reporter: AJ Zmudosky The documentation for the 'selmodule' type states that the default value of 'syncversion' is 'false'. However it is actually 'undef' (the type does not set 'defaultto' for this parameter). If 'syncversion' is explicitly set to false, Puppet runs on RHEL <=7.2 fail because the semodule provider still calls the syncversion method which raises an exception when '/usr/sbin/semodule --upgrade ...' fails because the module is the same version on disk and loaded. However, in RHEL7.3, Red Hat updated SELinux's policycoreutils which changed the behavior of the semodule utility that Puppet's selmodule provider depends on. The utility no longer reports the version of loaded SELinux modules. This has been reported in = 23" class="issue-link" data-issue-key="PUP-5649" style="color: #3b73af; text-decoration: none">PUP-5649. The effect is that every Puppet run on RHEL7.3 reports a c
