Compare commits

...

6 Commits
master ... f28

Author SHA1 Message Date
Petr Lautrbach d21cb2bd77 setroubleshoot-3.3.19-2
- Use the correct audit plugin path (#1662256)
2018-12-29 15:40:08 +01:00
Petr Lautrbach 6ba020bd35 Temporary use a different name for sedispatch plugin
Since /etc/audisp/plugins.d/sedispatch.conf was a directory in previous version,
the same name can't be used for a file:

Error: Transaction check error:
  file /etc/audisp/plugins.d/sedispatch.conf from install of setroubleshoot-server-3.3.19-2.fc28.x86_64 conflicts with file from package setroubleshoot-server-3.3.19-1.fc28.x86_64

Lets use sedispatch-3.conf temporary until this problem settles down.

https://bugzilla.redhat.com/show_bug.cgi?id=1662256
2018-12-29 15:37:07 +01:00
Petr Lautrbach 3e7f679c22 Use the correct audit plugin path
The path needs to be specified as a destination directory, not a whole filename
path.

Fixes:
audispd[1008]: Error - /etc/audisp/plugins.d/sedispatch.conf is not a regular file
audispd[1008]: Skipping sedispatch.conf plugin due to errors
audispd[1008]: No plugins found, exitin

https://bugzilla.redhat.com/show_bug.cgi?id=1662256
2018-12-29 15:35:08 +01:00
Petr Lautrbach b9fe469112 Use pre audit-3 plugin path
The latest setroubleshoot uses default audit-3 plugins path -
/etc/audit/plugins.d - but Fedora 28 still uses the old /etc/audisp/plugins.d/
2018-12-09 21:13:05 +01:00
Petr Lautrbach 8d2a9fbf05 setroubleshoot-3.3.19
- Require plugins >= 3.3.10
- Update scriptlets to reload auditd after install or uninstall
- Update translations
- Improve myplatform detection in get_os_environment()
- Fix summary and "if" text for AVCs with unknown target path
2018-12-08 23:46:14 +01:00
Petr Lautrbach ecc445aa66 Update scriptlets to reload auditd service
When setroubleshoot sedispatch is installed, or updated, auditd needs to be
reloaded so that it runs the new installed plugin. Since auditd needs to know
who reloaded him, `systemctl` can't be used. We need to use `service` script.

This fixes the problem when setroubleshoot is installed, but it doesn't collect
AVC denial messages until the machine is rebooted.

/com/redhat/setroubleshootd interface is not used for years therefore we can
drop it.
2018-12-08 23:43:45 +01:00
3 changed files with 21 additions and 17 deletions

2
.gitignore vendored
View File

@ -202,3 +202,5 @@ setroubleshoot-2.2.93.tar.gz
/setroubleshoot-3.3.15.tar.gz
/setroubleshoot-3.3.16.tar.gz
/setroubleshoot-3.3.17.tar.gz
/setroubleshoot-3.3.18.tar.gz
/setroubleshoot-3.3.19.tar.gz

View File

@ -1,7 +1,7 @@
Summary: Helps troubleshoot SELinux problems
Name: setroubleshoot
Version: 3.3.17
Release: 1%{?dist}
Version: 3.3.19
Release: 2%{?dist}
License: GPLv2+
URL: https://pagure.io/setroubleshoot
Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz
@ -55,19 +55,11 @@ to user preference. The same tools can be run on existing log files.
%{_bindir}/seapplet
%post
dbus-send --system /com/redhat/setroubleshootd com.redhat.SEtroubleshootdIface.restart string:'rpm install' >/dev/null 2>&1 || :
%systemd_post auditd.service
%postun
%systemd_postun_with_restart auditd.service
%prep
%autosetup -p 2
%build
%configure PYTHON=%{__python3} --enable-seappletlegacy=yes
%configure PYTHON=%{__python3} --enable-seappletlegacy=yes --with-auditpluginsdir=/etc/audisp/plugins.d
make
%install
@ -80,14 +72,14 @@ touch %{buildroot}%{pkgvardatadir}/email_alert_recipients
rm -rf %{buildroot}/usr/share/doc/
# create /run/setroubleshoot on boot
install -m644 -D %{SOURCE1} $RPM_BUILD_ROOT%{_tmpfilesdir}/%{name}.conf
mv %{buildroot}/etc/audisp/plugins.d/sedispatch.conf %{buildroot}/etc/audisp/plugins.d/sedispatch-3.conf
%find_lang %{name}
%package server
Summary: SELinux troubleshoot server
Requires: %{name}-plugins >= 3.3.8
Requires: %{name}-plugins >= 3.3.10
Requires: audit >= 1.2.6-3
Requires: audit-libs-python3 >= 1.2.6-3
Requires: libxml2-python3
@ -113,10 +105,10 @@ to user preference. The same tools can be run on existing log files.
getent passwd %{username} >/dev/null || useradd -r -U -s /sbin/nologin -d %{pkgvardatadir} %{username}
%post server
%systemd_post auditd.service
/sbin/service auditd reload >/dev/null 2>&1 || :
%postun server
%systemd_postun_with_restart auditd.service
/sbin/service auditd reload >/dev/null 2>&1 || :
%triggerun server -- %{name}-server < 3.2.24-4
chown -R setroubleshoot:setroubleshoot %{pkgvardatadir}
@ -177,7 +169,7 @@ chown -R setroubleshoot:setroubleshoot %{pkgvardatadir}
%{_mandir}/man8/sealert.8.gz
%{_mandir}/man8/sedispatch.8.gz
%{_mandir}/man8/setroubleshootd.8.gz
%config /etc/audisp/plugins.d/sedispatch.conf
%config /etc/audisp/plugins.d/sedispatch-3.conf
%{_datadir}/dbus-1/system-services/org.fedoraproject.Setroubleshootd.service
%{_datadir}/polkit-1/actions/org.fedoraproject.setroubleshootfixit.policy
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootFixit.conf
@ -199,6 +191,16 @@ SELinux troubleshoot legacy applet
%{_bindir}/seappletlegacy
%changelog
* Sat Dec 29 2018 Petr Lautrbach <plautrba@redhat.com> - 3.3.19-2
- Use the correct audit plugin path (#1662256)
* Sat Dec 8 2018 Petr Lautrbach <plautrba@redhat.com> - 3.3.19-1
- Require plugins >= 3.3.10
- Update scriptlets to reload auditd after install or uninstall
- Update translations
- Improve myplatform detection in get_os_environment()
- Fix summary and "if" text for AVCs with unknown target path
* Mon Feb 26 2018 Petr Lautrbach <plautrba@redhat.com> - 3.3.17-1
- Set auto_save_interval to 5 (#1548913,#1523406,#1539180)
- seapplet: Try send and close notifications (#1541624,#1541719,#1544222,#1539367)

View File

@ -1 +1 @@
SHA512 (setroubleshoot-3.3.17.tar.gz) = ae0083163f909fad3d5ef91dd3c80f3263452e50dd314ab0f1e6394022cbe771111655919f7518fd1351dcc195929dd81b838436ef797174f5bf3baf4f9adf15
SHA512 (setroubleshoot-3.3.19.tar.gz) = e012f9c0011fd682394232c9297e01710a389cc4bbae11193f75780c96a99451d7d8a77080a7d4686525ca8b8bbc6332991b7b06a282345d2baba64bab9beb24