GNU logs - #39172, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#39172: SElinux guix-daemon.cil file
Resent-From: Matt Wette <matt.wette@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 18 Jan 2020 15:41:01 +0000
Resent-Message-ID: <handler.39172.B.157936202816309 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 39172 <at> debbugs.gnu.org
From: Matt Wette <matt.wette@HIDDEN>
Message-ID: <b637f042-0881-ea44-eb6c-68118cca6b27@HIDDEN>
Date: Sat, 18 Jan 2020 07:40:18 -0800
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101
 Thunderbird/68.4.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi All,

I appologize for the formatting.  I use tbird and I can't find a way to 
do plain-text mode.

I'm trying to get guix-1.0.1 running on Fedora-30 with its default 
SElinux set up.
I found (hint from 
https://lists.gnu.org/archive/html/guix-devel/2019-05/msg00109.html)
that the guix-daemon.cil file seems to be missing a few items. Without 
this patch
     # restorecon -R /gnu/store
fails.

--- guix-daemon.cil.orig    2020-01-18 07:08:12.905986299 -0800
+++ guix-daemon.cil    2020-01-18 07:09:49.765737261 -0800
@@ -34,14 +34,19 @@
    (roletype object_r guix_daemon_t)
    (type guix_daemon_conf_t)
    (roletype object_r guix_daemon_conf_t)
+  (typeattributeset file_type guix_daemon_conf_t)
    (type guix_daemon_exec_t)
    (roletype object_r guix_daemon_exec_t)
+  (typeattributeset file_type guix_daemon_exec_t)
    (type guix_daemon_socket_t)
    (roletype object_r guix_daemon_socket_t)
+  (typeattributeset file_type guix_daemon_socket_t)
    (type guix_store_content_t)
    (roletype object_r guix_store_content_t)
+  (typeattributeset file_type guix_store_content_t)
    (type guix_profiles_t)
    (roletype object_r guix_profiles_t)
+  (typeattributeset file_type guix_profiles_t)

    ;; These types are domains, thereby allowing process rules
    (typeattributeset domain (guix_daemon_t guix_daemon_exec_t))

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Matt Wette <matt.wette@HIDDEN>
Subject: bug#39172: Acknowledgement (SElinux guix-daemon.cil file)
Message-ID: <handler.39172.B.157936202816309.ack <at> debbugs.gnu.org>
References: <b637f042-0881-ea44-eb6c-68118cca6b27@HIDDEN>
X-Gnu-PR-Message: ack 39172
X-Gnu-PR-Package: guix
Reply-To: 39172 <at> debbugs.gnu.org
Date: Sat, 18 Jan 2020 15:41:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 39172 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
39172: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D39172
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#39172: SElinux guix-daemon.cil file
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 20 Jan 2020 09:15:01 +0000
Resent-Message-ID: <handler.39172.B39172.157951164827141 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Matt Wette <matt.wette@HIDDEN>, Ricardo Wurmus <rekado@HIDDEN>
Cc: 39172 <at> debbugs.gnu.org
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <b637f042-0881-ea44-eb6c-68118cca6b27@HIDDEN>
Date: Mon, 20 Jan 2020 10:13:50 +0100
In-Reply-To: <b637f042-0881-ea44-eb6c-68118cca6b27@HIDDEN> (Matt Wette's
 message of "Sat, 18 Jan 2020 07:40:18 -0800")
Message-ID: <87h80qij75.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hi Matt,

Matt Wette <matt.wette@HIDDEN> skribis:

> I'm trying to get guix-1.0.1 running on Fedora-30 with its default
> SElinux set up.
> I found (hint from
> https://lists.gnu.org/archive/html/guix-devel/2019-05/msg00109.html)
> that the guix-daemon.cil file seems to be missing a few items. Without
> this patch
> =C2=A0=C2=A0=C2=A0 # restorecon -R /gnu/store
> fails.

OK, thanks for finding it out!

> --- guix-daemon.cil.orig=C2=A0=C2=A0=C2=A0 2020-01-18 07:08:12.905986299 =
-0800
> +++ guix-daemon.cil=C2=A0=C2=A0=C2=A0 2020-01-18 07:09:49.765737261 -0800
> @@ -34,14 +34,19 @@
> =C2=A0=C2=A0 (roletype object_r guix_daemon_t)
> =C2=A0=C2=A0 (type guix_daemon_conf_t)
> =C2=A0=C2=A0 (roletype object_r guix_daemon_conf_t)
> +=C2=A0 (typeattributeset file_type guix_daemon_conf_t)
> =C2=A0=C2=A0 (type guix_daemon_exec_t)
> =C2=A0=C2=A0 (roletype object_r guix_daemon_exec_t)
> +=C2=A0 (typeattributeset file_type guix_daemon_exec_t)
> =C2=A0=C2=A0 (type guix_daemon_socket_t)
> =C2=A0=C2=A0 (roletype object_r guix_daemon_socket_t)
> +=C2=A0 (typeattributeset file_type guix_daemon_socket_t)
> =C2=A0=C2=A0 (type guix_store_content_t)
> =C2=A0=C2=A0 (roletype object_r guix_store_content_t)
> +=C2=A0 (typeattributeset file_type guix_store_content_t)
> =C2=A0=C2=A0 (type guix_profiles_t)
> =C2=A0=C2=A0 (roletype object_r guix_profiles_t)
> +=C2=A0 (typeattributeset file_type guix_profiles_t)
>
> =C2=A0=C2=A0 ;; These types are domains, thereby allowing process rules
> =C2=A0=C2=A0 (typeattributeset domain (guix_daemon_t guix_daemon_exec_t))

Ricardo, WDYT?  I know nothing about this config file so I=E2=80=99d rather=
 have
your approval before pushing.

Ludo=E2=80=99.

Message sent to bug-guix@HIDDEN:

Subject: bug#39172: SElinux guix-daemon.cil file
Resent-From: Ricardo Wurmus <rekado@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 20 Jan 2020 10:36:02 +0000
Resent-Message-ID: <handler.39172.B39172.157951656017361 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: 39172 <at> debbugs.gnu.org, Matt Wette <matt.wette@HIDDEN>
References: <b637f042-0881-ea44-eb6c-68118cca6b27@HIDDEN>
 <87h80qij75.fsf@HIDDEN>
User-agent: mu4e 1.2.0; emacs 26.3
From: Ricardo Wurmus <rekado@HIDDEN>
In-reply-to: <87h80qij75.fsf@HIDDEN>
Date: Mon, 20 Jan 2020 11:35:36 +0100
Message-ID: <87iml6wh3b.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>


Ludovic Court=C3=A8s <ludo@HIDDEN> writes:

> Hi Matt,
>
> Matt Wette <matt.wette@HIDDEN> skribis:
>
>> I'm trying to get guix-1.0.1 running on Fedora-30 with its default
>> SElinux set up.
>> I found (hint from
>> https://lists.gnu.org/archive/html/guix-devel/2019-05/msg00109.html)
>> that the guix-daemon.cil file seems to be missing a few items. Without
>> this patch
>>     # restorecon -R /gnu/store
>> fails.
>
> OK, thanks for finding it out!
>
>> --- guix-daemon.cil.orig    2020-01-18 07:08:12.905986299 -0800
>> +++ guix-daemon.cil    2020-01-18 07:09:49.765737261 -0800
>> @@ -34,14 +34,19 @@
>>    (roletype object_r guix_daemon_t)
>>    (type guix_daemon_conf_t)
>>    (roletype object_r guix_daemon_conf_t)
>> +  (typeattributeset file_type guix_daemon_conf_t)
>>    (type guix_daemon_exec_t)
>>    (roletype object_r guix_daemon_exec_t)
>> +  (typeattributeset file_type guix_daemon_exec_t)
>>    (type guix_daemon_socket_t)
>>    (roletype object_r guix_daemon_socket_t)
>> +  (typeattributeset file_type guix_daemon_socket_t)
>>    (type guix_store_content_t)
>>    (roletype object_r guix_store_content_t)
>> +  (typeattributeset file_type guix_store_content_t)
>>    (type guix_profiles_t)
>>    (roletype object_r guix_profiles_t)
>> +  (typeattributeset file_type guix_profiles_t)
>>
>>    ;; These types are domains, thereby allowing process rules
>>    (typeattributeset domain (guix_daemon_t guix_daemon_exec_t))
>
> Ricardo, WDYT?  I know nothing about this config file so I=E2=80=99d rath=
er have
> your approval before pushing.

Could we also do this in one expression?

    (typeattributeset file_type (or guix_profiles_t
                                    guix_daemon_conf_t
                                    guix_daemon_exec_t
                                    guix_daemon_socket_t
                                    guix_store_content_t))

I also think we need to declare our use of =E2=80=9Cfile_type=E2=80=9D firs=
t:

    (typeattribute file_type)

What do you think?

--=20
Ricardo

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#39172: SElinux guix-daemon.cil file
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 27 Jan 2020 21:51:01 +0000
Resent-Message-ID: <handler.39172.B39172.15801618399330 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 39172
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ricardo Wurmus <rekado@HIDDEN>
Cc: 39172 <at> debbugs.gnu.org, Matt Wette <matt.wette@HIDDEN>
Received: via spool by 39172-submit <at> debbugs.gnu.org id=B39172.15801618399330
          (code B ref 39172); Mon, 27 Jan 2020 21:51:01 +0000
Received: (at 39172) by debbugs.gnu.org; 27 Jan 2020 21:50:39 +0000
Received: from localhost ([127.0.0.1]:59134 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1iwCHH-0002QQ-09
	for submit <at> debbugs.gnu.org; Mon, 27 Jan 2020 16:50:39 -0500
Received: from eggs.gnu.org ([209.51.188.92]:56713)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1iwCHF-0002QB-Ds
 for 39172 <at> debbugs.gnu.org; Mon, 27 Jan 2020 16:50:37 -0500
Received: from fencepost.gnu.org ([2001:470:142:3::e]:42516)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <ludo@HIDDEN>)
 id 1iwCHA-0005t6-6D; Mon, 27 Jan 2020 16:50:32 -0500
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=55762 helo=ribbon)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1iwCH9-0006cE-Bq; Mon, 27 Jan 2020 16:50:31 -0500
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
References: <b637f042-0881-ea44-eb6c-68118cca6b27@HIDDEN>
 <87h80qij75.fsf@HIDDEN> <87iml6wh3b.fsf@HIDDEN>
Date: Mon, 27 Jan 2020 22:50:29 +0100
In-Reply-To: <87iml6wh3b.fsf@HIDDEN> (Ricardo Wurmus's message of "Mon,
 20 Jan 2020 11:35:36 +0100")
Message-ID: <87d0b4fu1m.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hello,

Ricardo Wurmus <rekado@HIDDEN> skribis:

> Could we also do this in one expression?
>
>     (typeattributeset file_type (or guix_profiles_t
>                                     guix_daemon_conf_t
>                                     guix_daemon_exec_t
>                                     guix_daemon_socket_t
>                                     guix_store_content_t))
>
> I also think we need to declare our use of =E2=80=9Cfile_type=E2=80=9D fi=
rst:
>
>     (typeattribute file_type)
>
> What do you think?

Matt, does what Ricardo proposes work for you?

TIA,
Ludo=E2=80=99.

Last modified: Mon, 27 Jan 2020 22:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.