[DSE-Dev] Bug#740591: selinux-policy-default: postgresql manpages unlabeled, preventing indexing by mand

2014-03-03 Thread Devin Carraway
Package: selinux-policy-default Version: 2:2.20140206-1 Severity: minor Tags: patch The postgresql manpages in Debian are installed under the pg share dir, /usr/share/postgresl/9.*/man/, and linked via alternatives to the usual manpage locations . They're thus left labelled as usr_t, preventing

[DSE-Dev] Bug#740563: Bug#740563: policycoreutils: semodule -d/-e is ridiculously slow

2014-03-03 Thread Zack Weinberg
On 2014-03-02 8:14 PM, Laurent Bigonville wrote: Le Sun, 02 Mar 2014 17:09:39 -0500, Zack Weinberg za...@panix.com a écrit : Enabling or disabling any SELinux module with `semodule -e` / `-d` takes approximately one minute, which makes manual module selection an exercise in frustration. It

[DSE-Dev] Bug#740563: Bug#740563: policycoreutils: semodule -d/-e is ridiculously slow

2014-03-03 Thread Laurent Bigonville
Le Mon, 03 Mar 2014 12:11:56 -0500, Zack Weinberg za...@panix.com a écrit : On 2014-03-02 8:14 PM, Laurent Bigonville wrote: Le Sun, 02 Mar 2014 17:09:39 -0500, Zack Weinberg za...@panix.com a écrit : Enabling or disabling any SELinux module with `semodule -e` / `-d` takes

[DSE-Dev] Bug#740563: Fwd: Bug#740563: policycoreutils: semodule -d/-e is ridiculously slow

2014-03-03 Thread Zack Weinberg
On Mon, Mar 3, 2014 at 12:24 PM, Laurent Bigonville bi...@debian.org wrote: Le Mon, 03 Mar 2014 12:11:56 -0500, Zack Weinberg za...@panix.com a écrit : But I think 15 seconds is still too slow. It *appears* that the primary effect of semodule -d NAME is equivalent to touch

[DSE-Dev] Processed: Re: Bug#740657: selinux-policy-default: Unbound-related label adjustments

2014-03-03 Thread Debian Bug Tracking System
Processing control commands: reassign -1 src:refpolicy 2:2.20140206-1 Bug #740657 [src:selinux-policy-default] selinux-policy-default: Unbound-related label adjustments Warning: Unknown package 'src:selinux-policy-default' Bug reassigned from package 'src:selinux-policy-default' to

[DSE-Dev] Processed: Re: Bug#740656: selinux-policy-default: missing fcontext rule for /etc/init.d/ntp

2014-03-03 Thread Debian Bug Tracking System
Processing control commands: reassign -1 src:refpolicy 2:2.20140206-1 Bug #740656 [src:selinux-policy-default] selinux-policy-default: missing fcontext rule for /etc/init.d/ntp Warning: Unknown package 'src:selinux-policy-default' Bug reassigned from package 'src:selinux-policy-default' to

[DSE-Dev] Bug#740685: selinux-policy-default: incompatible with resolvconf

2014-03-03 Thread Zack Weinberg
Package: selinux-policy-default Version: 2:2.20140206-1 Severity: normal The SELinux policy doesn't understand resolvconf. It doesn't appear to throw any sort of AVC denial on the operation of resolvconf *itself* (probably because it does all its work from uber-privileged init.d and DHCP hook