GNU logs - #77597, boring messages

Message sent to bug-coreutils@HIDDEN:

Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: "Rahul Sandhu" <nvraxn@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 05:00:05 +0000
Resent-Message-ID: <handler.77597.B.174400200112257 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 77597 <at> debbugs.gnu.org
Cc: eggert@HIDDEN
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Sun, 06 Apr 2025 02:49:32 +0100
Message-Id: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
From: "Rahul Sandhu" <nvraxn@HIDDEN>
Received-SPF: pass client-ip=2a00:1450:4864:20::535;
 envelope-from=nvraxn@HIDDEN; helo=mail-ed1-x535.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Mailman-Approved-At: Mon, 07 Apr 2025 00:59:58 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

Hey,

coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware
builds. `ls -Z` fails to obtain the security context for certain
filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with
refpolicy:

rsandhu@graphite ~ $ ls -alZ /run/ | grep '?'
drwxr-xr-x   3 root     root     ?                                         =
      60 Apr  5 16:38 credentials
drwxr-xr-x   3 root     root     ?                                         =
      80 Apr  2 16:30 initramfs
drwxr-xr-x   2 root     root     ?                                         =
      40 Apr  2 16:23 modprobe.d

rsandhu@graphite ~ $ getfilecon /run/{credentials,initramfs,modprobe.d}
/run/credentials        system_u:object_r:tmpfs_t:s0
/run/initramfs  system_u:object_r:tmpfs_t:s0
/run/modprobe.d system_u:object_r:tmpfs_t:s0

Since 432ad8738387f1b2e80e883dc7080df3afabe, coreutils attempts to list
all attributes instead of specifically getting the "security.selinux"
xattr via `getxattr(2)` (which is what libselinux internally calls). As
seen below, the security context xattr only shows when specifically
requesting it by passing the arguments -n 'security.selinux' to the
command line:
rsandhu@graphite ~ $ getfattr -d -m '' /run/credentials
<no output>
rsandhu@graphite ~ $ getfattr -n 'security.selinux' /run/credentials
getfattr: Removing leading '/' from absolute path names
# file: run/credentials
security.selinux=3D"system_u:object_r:tmpfs_t:s0"

Reverting this commit[1], which no longer handles this case, fixes the
regression.
case.
More information is available in the related post on the SELinux mailing
list[2].

Thanks,
Rahul

[1] https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=3D4ce432ad87=
38387f1b2e80e883dc7080df3afabe
[2] https://lore.kernel.org/selinux/CAFqZXNtF8wDyQajPCdGn=3DiOawX4y77ph0Ecf=
cqcUUj+T87FKyA@HIDDEN/

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: "Rahul Sandhu" <nvraxn@HIDDEN>
Subject: bug#77597: Acknowledgement (coreutils 9.6: regression in handling
 security.selinux attribute for ls(1))
Message-ID: <handler.77597.B.174400200112257.ack <at> debbugs.gnu.org>
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
X-Gnu-PR-Message: ack 77597
X-Gnu-PR-Package: coreutils
Reply-To: 77597 <at> debbugs.gnu.org
Date: Mon, 07 Apr 2025 05:00:06 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-coreutils@HIDDEN

If you wish to submit further information on this problem, please
send it to 77597 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
77597: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D77597
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-coreutils@HIDDEN:

Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 18:04:01 +0000
Resent-Message-ID: <handler.77597.B77597.174404900010615 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org
Cc: eggert@HIDDEN
Message-ID: <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN>
Date: Mon, 7 Apr 2025 19:03:08 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird Beta
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
Content-Language: en-US
From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
In-Reply-To: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On 06/04/2025 02:49, Rahul Sandhu wrote:
> Hey,
> 
> coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware
> builds. `ls -Z` fails to obtain the security context for certain
> filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with
> refpolicy:
> 
> rsandhu@graphite ~ $ ls -alZ /run/ | grep '?'
> drwxr-xr-x   3 root     root     ?                                               60 Apr  5 16:38 credentials
> drwxr-xr-x   3 root     root     ?                                               80 Apr  2 16:30 initramfs
> drwxr-xr-x   2 root     root     ?                                               40 Apr  2 16:23 modprobe.d

This may be fixed with https://github.com/coreutils/coreutils/commit/cb2abbac7

Could you try the latest snapshot to see if it fixes this for you?

   wget https://pixelbeat.org/cu/coreutils-ss.tar.xz
   tar -xf coreutils-ss.tar.xz
   cd coreutils-9.6.53-14af8/
   ./configure && make -j4
   src/ls -alZ /run/

thanks,
Pádraig.

Message sent to bug-coreutils@HIDDEN:

Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 18:23:02 +0000
Resent-Message-ID: <handler.77597.B77597.174405017916477 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org
Cc: eggert@HIDDEN
Message-ID: <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN>
Date: Mon, 7 Apr 2025 19:22:43 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird Beta
From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
 <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN>
Content-Language: en-US
In-Reply-To: <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On 07/04/2025 19:03, Pádraig Brady wrote:
> On 06/04/2025 02:49, Rahul Sandhu wrote:
>> Hey,
>>
>> coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware
>> builds. `ls -Z` fails to obtain the security context for certain
>> filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with
>> refpolicy:
>>
>> rsandhu@graphite ~ $ ls -alZ /run/ | grep '?'
>> drwxr-xr-x   3 root     root     ?                                               60 Apr  5 16:38 credentials
>> drwxr-xr-x   3 root     root     ?                                               80 Apr  2 16:30 initramfs
>> drwxr-xr-x   2 root     root     ?                                               40 Apr  2 16:23 modprobe.d
> 
> This may be fixed with https://github.com/coreutils/coreutils/commit/cb2abbac7
> 
> Could you try the latest snapshot to see if it fixes this for you?
> 
>     wget https://pixelbeat.org/cu/coreutils-ss.tar.xz
>     tar -xf coreutils-ss.tar.xz
>     cd coreutils-9.6.53-14af8/
>     ./configure && make -j4
>     src/ls -alZ /run/
> 

Actually sorry the above will not address this.
I'll have a deeper look now.

thanks,
Pádraig

Message sent to bug-coreutils@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 19:05:02 +0000
Resent-Message-ID: <handler.77597.B77597.174405267428935 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 77597
X-GNU-PR-Package: coreutils
X-GNU-PR-Keywords: 
To: Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org
Cc: eggert@HIDDEN
Received: via spool by 77597-submit <at> debbugs.gnu.org id=B77597.174405267428935
          (code B ref 77597); Mon, 07 Apr 2025 19:05:02 +0000
Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 19:04:34 +0000
Received: from localhost ([127.0.0.1]:56915 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1u1rlq-0007Wb-41
	for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 15:04:34 -0400
Received: from mail-wm1-x32b.google.com ([2a00:1450:4864:20::32b]:43398)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.84_2) (envelope-from <pixelbeat@HIDDEN>)
 id 1u1rln-0007W8-M5
 for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 15:04:32 -0400
Received: by mail-wm1-x32b.google.com with SMTP id
 5b1f17b1804b1-43cf628cb14so38259955e9.1
 for <77597 <at> debbugs.gnu.org>; Mon, 07 Apr 2025 12:04:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1744052665; x=1744657465; darn=debbugs.gnu.org;
 h=in-reply-to:content-language:references:cc:to:from:subject
 :user-agent:mime-version:date:message-id:sender:from:to:cc:subject
 :date:message-id:reply-to;
 bh=CJ4G69SMMelUD7HyjdlVipN4g32YsHkrEpVonYGzaD4=;
 b=HoTfcUHUGahuUC/dHN9R2vwQ8617PDRMDYwh5ABG8Icq9LFoeBq9OuZPTWOLVgF8r+
 5wrc/AN2roncieUmCgC65XnCnsEvqeHsNBdOfnRjtVvqk3/u0T3Sq7ILSuQswNGGEnoJ
 8s02dNl+MCccHGBcUhZDmSSUNzKYbqpOYKfni0Uh1Sk+mUFoUHQJzNc45GebNu62vHyQ
 ixnStompfwlOHW0ExA45KqdlODkkpHTaMUtLDjpMMBxYAbZl4cVm23rs7mK7XKdaqeXO
 xQerapTTzHWbQ2J2oyYbr2TafBIpOHT3Mh1AIFVL+Mx42q1qSojgmpllGmC08T2MBINV
 NHWw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1744052665; x=1744657465;
 h=in-reply-to:content-language:references:cc:to:from:subject
 :user-agent:mime-version:date:message-id:sender:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=CJ4G69SMMelUD7HyjdlVipN4g32YsHkrEpVonYGzaD4=;
 b=SSltzsbD3aunTFdOf5CvLzpV8v7NF2BVX/CGZUxDXVZTiPIi6S8uJoNvNls05HtnaN
 TmwZNTNzTKW3SGg+NGMcQ93sg61DT2GZixlRDLfIN/YeNzEvrbqOY8fQvsu5u0lBhbg0
 8/Edy6E96WJQbf/BLl7SO3ohJoVOBbD5oiFRyZthnKxMCwkwu3iTtktsbTuNWjSISVF/
 SkPdWxGK3ciGb+tAa2R8TqOWF4LVl2oKoNtdgfkGKVLD3h3c3901IXc7tRHX8bRT6Rwy
 BU7RzsK32tiND/X6A0kiWCe0/Zc8Fnhk9WmKGTf2r+dKv46Kq+jXucf3xXfvmsgSWTpg
 vf+A==
X-Forwarded-Encrypted: i=1;
 AJvYcCUVUZj5Fn1ESGLLdnUMrYgKZNPUeZOEbuQpXMP4kSg5Cq5NO5fBRAkJ+DmcwqqoWPPhwYXrUg==@debbugs.gnu.org
X-Gm-Message-State: AOJu0Yxe1FRgUHbz2fPt+x+iweFkS2y4aXTRIezdhuzV+Ww2HdGiQ3gF
 uy0yrVuYMlOTTJNGUfiPAmGS9M7Ru+SwpIquRb44FLH04xbQQ6ib
X-Gm-Gg: ASbGncuqeqFsr3mgLrkYZz7FvNeExMhn8kZ8ydqzUI36lp92AC+tEtGm0Oktl/zZwya
 ubBvv8OW+OZlF99uRHKZLOaybMKZBgXFaYDohpQylf7LlcJKscyOQu8uQxDtk+bBWvp5lpXVDga
 esgy+DT90opqL5ivpyRzEeSrScwCommPCcIT3ikzVfLTy1NfpIBQTN8a8msb4HiPZQjZBZu+Z3U
 pRqLoBMHBIa/Rye9jheuPSwrEoFygvt83bgK8PM6XTUHYsrvmJjRJsJH70SeW2H8NSltfZ5WdTA
 8aj+WAwDDFC5dgIfr5qm2U88/Fv9V3kvvSSwBs5BLSRWlfgL/nbJUZ2RkQPHbCbw/aKcIc/vCT+
 cSHyGnm4ByiL3CRzpC4YwwG0y
X-Google-Smtp-Source: AGHT+IEUDDK6zjeNUB0aPSbBHcYJ7PMLqar92RBQWDeMQLgfQGB98UnAeTZlF36tXgVTPWokGPCu7A==
X-Received: by 2002:a05:6000:4616:b0:39b:f44b:e176 with SMTP id
 ffacd0b85a97d-39d821116bemr536206f8f.24.1744052665285; 
 Mon, 07 Apr 2025 12:04:25 -0700 (PDT)
Received: from [192.168.1.19]
 (86-44-211-146-dynamic.agg2.lod.rsl-rtd.eircom.net. [86.44.211.146])
 by smtp.googlemail.com with ESMTPSA id
 ffacd0b85a97d-39d75ac6d66sm6573783f8f.14.2025.04.07.12.04.24
 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
 Mon, 07 Apr 2025 12:04:24 -0700 (PDT)
Content-Type: multipart/mixed; boundary="------------QDKrD3K3fxZU0nBNSQJfWCyg"
Message-ID: <84c1e24d-22ce-474c-a383-b21136732ab7@HIDDEN>
Date: Mon, 7 Apr 2025 20:04:23 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird Beta
From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
 <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN>
 <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN>
Content-Language: en-US
In-Reply-To: <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN>
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

This is a multi-part message in MIME format.
--------------QDKrD3K3fxZU0nBNSQJfWCyg
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

On 07/04/2025 19:22, Pádraig Brady wrote:
> On 07/04/2025 19:03, Pádraig Brady wrote:
>> On 06/04/2025 02:49, Rahul Sandhu wrote:
>>> Hey,
>>>
>>> coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware
>>> builds. `ls -Z` fails to obtain the security context for certain
>>> filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with
>>> refpolicy:
>>>
>>> rsandhu@graphite ~ $ ls -alZ /run/ | grep '?'
>>> drwxr-xr-x   3 root     root     ?                                               60 Apr  5 16:38 credentials
>>> drwxr-xr-x   3 root     root     ?                                               80 Apr  2 16:30 initramfs
>>> drwxr-xr-x   2 root     root     ?                                               40 Apr  2 16:23 modprobe.d
>>
>> This may be fixed with https://github.com/coreutils/coreutils/commit/cb2abbac7
>>
>> Could you try the latest snapshot to see if it fixes this for you?
>>
>>      wget https://pixelbeat.org/cu/coreutils-ss.tar.xz
>>      tar -xf coreutils-ss.tar.xz
>>      cd coreutils-9.6.53-14af8/
>>      ./configure && make -j4
>>      src/ls -alZ /run/
>>
> 
> Actually sorry the above will not address this.
> I'll have a deeper look now.

The attached gnulib patch passes quick tests here.
I'll think some more about it and apply later.

thanks,
Pádraig
--------------QDKrD3K3fxZU0nBNSQJfWCyg
Content-Type: text/x-patch; charset=UTF-8;
 name="gnulib-selinux-empty-listxattr.patch"
Content-Disposition: attachment;
 filename="gnulib-selinux-empty-listxattr.patch"
Content-Transfer-Encoding: base64

LS0tIC9ob21lL3BhZHJhaWcvZ2l0L2dudWxpYi9saWIvZmlsZS1oYXMtYWNsLmMJMjAyNS0w
My0yMSAxMTo1Mzo0My4yMTE1Njk5NDggKzAwMDAKKysrIGxpYi9maWxlLWhhcy1hY2wuYwky
MDI1LTA0LTA3IDE4OjU0OjQ1LjU4NjgzMjM5NCArMDAwMApAQCAtNTAsNiArNTAsNyBAQAog
IyAgaW5jbHVkZSA8c2VsaW51eC9zZWxpbnV4Lmg+CiAjIGVuZGlmCiAjIGluY2x1ZGUgPHN0
ZGNrZGludC5oPgorIyBpbmNsdWRlIDxzdGRpbnQuaD4KICMgaW5jbHVkZSA8c3RyaW5nLmg+
CiAjIGluY2x1ZGUgPGFycGEvaW5ldC5oPgogIyBpbmNsdWRlIDxzeXMveGF0dHIuaD4KQEAg
LTEwMiwxMyArMTAzLDE3IEBACiAgICBUaGlzIGlzIHRoZSBjYXNlIHdoZW4gW2xdbGlzdHhh
dHRyIGZhaWxlZCB3aXRoIEUyQklHLAogICAgb3IgaXMgbm90IHN1cHBvcnRlZCAoIWFjbF9l
cnJub192YWxpZCgpKSwgb3IgZmFpbGVkIHdpdGggRUFDQ0VTCiAgICB3aGljaCBpbiBMaW51
eCBrZXJuZWwgNi4xMiBORlMgY2FuIG1lYW4gbWVyZWx5IHRoYXQgd2UgbGFjayByZWFkIGFj
Y2Vzcy4KKyAgIEFsc28gYWktPnNpemUgPT0gMCB3YXMgc2VlbiB3aXRoIGNlcnRhaW4gZmls
ZSBzeXN0ZW0gb2JqZWN0cyBvbiBMaW51eCwKKyAgIGxpa2UgL3J1bi9pbml0cmFtZnMgd2hl
cmUgbGlzdHhhdHRyKCkgcmV0dXJucyAwCisgICBidXQgZ2V0eGF0dHIoInNlY3VyaXR5LnNl
bGludXgiKSByZXR1cm5zIGRhdGEuCiAqLwogCiBzdGF0aWMgYm9vbAogYWNsaW5mb19tYXlf
aW5kaWNhdGVfeGF0dHIgKHN0cnVjdCBhY2xpbmZvIGNvbnN0ICphaSkKIHsKLSAgcmV0dXJu
IGFpLT5zaXplIDwgMCAmJiAoIWFjbF9lcnJub192YWxpZCAoYWktPnUuZXJyKQotICAgICAg
ICAgICAgICAgICAgICAgICAgICB8fCBhaS0+dS5lcnIgPT0gRUFDQ0VTIHx8IGFpLT51LmVy
ciA9PSBFMkJJRyk7CisgIHJldHVybiBhaS0+c2l6ZSA9PSAwCisgICAgICAgICB8fCAoYWkt
PnNpemUgPCAwICYmICghYWNsX2Vycm5vX3ZhbGlkIChhaS0+dS5lcnIpCisgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICB8fCBhaS0+dS5lcnIgPT0gRUFDQ0VTIHx8IGFpLT51LmVy
ciA9PSBFMkJJRykpOwogfQogCiAvKiBEb2VzIE5BTUUgaGF2ZSBYQVRUUj8gICovCkBAIC0y
MDYsMTMgKzIxMSwxMiBAQAogICAgICAgICB9CiAgICAgfQogCi0gIC8qIEEgc2VjdXJpdHkg
Y29udGV4dCBjYW4gZXhpc3Qgb25seSBpZiBleHRlbmRlZCBhdHRyaWJ1dGVzIGRvLiAgKi8K
ICAgaWYgKGZsYWdzICYgQUNMX0dFVF9TQ09OVEVYVAogICAgICAgJiYgKDAgPCBhaS0+c2l6
ZSB8fCBhY2xpbmZvX21heV9pbmRpY2F0ZV94YXR0ciAoYWkpKSkKICAgICB7CiAgICAgICBp
ZiAoaXNfc21hY2tfZW5hYmxlZCAoKSkKICAgICAgICAgewotICAgICAgICAgIGlmIChhaS0+
c2l6ZSA8IDAgfHwgYWNsaW5mb19oYXNfeGF0dHIgKGFpLCBYQVRUUl9OQU1FX1NNQUNLKSkK
KyAgICAgICAgICBpZiAoYWktPnNpemUgPD0gMCB8fCBhY2xpbmZvX2hhc194YXR0ciAoYWks
IFhBVFRSX05BTUVfU01BQ0spKQogICAgICAgICAgICAgewogICAgICAgICAgICAgICBzc2l6
ZV90IHIgPSBzbWFja19uZXdfbGFiZWxfZnJvbV9wYXRoIChuYW1lLCAic2VjdXJpdHkuU01B
Q0s2NCIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgIGZsYWdzICYgQUNMX1NZTUxJTktfRk9MTE9XLApAQCAtMjIzLDcgKzIyNyw3IEBA
CiAgICAgICBlbHNlCiAgICAgICAgIHsKICMgaWYgVVNFX1NFTElOVVhfU0VMSU5VWF9ICi0g
ICAgICAgICAgaWYgKGFpLT5zaXplIDwgMCB8fCBhY2xpbmZvX2hhc194YXR0ciAoYWksIFhB
VFRSX05BTUVfU0VMSU5VWCkpCisgICAgICAgICAgaWYgKGFpLT5zaXplIDw9IDAgfHwgYWNs
aW5mb19oYXNfeGF0dHIgKGFpLCBYQVRUUl9OQU1FX1NFTElOVVgpKQogICAgICAgICAgICAg
ewogICAgICAgICAgICAgICBzc2l6ZV90IHIgPQogICAgICAgICAgICAgICAgICgoZmxhZ3Mg
JiBBQ0xfU1lNTElOS19GT0xMT1cgPyBnZXRmaWxlY29uIDogbGdldGZpbGVjb24pCg==

--------------QDKrD3K3fxZU0nBNSQJfWCyg--

Message sent to bug-coreutils@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: Paul Eggert <eggert@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 22:11:01 +0000
Resent-Message-ID: <handler.77597.B77597.174406383720019 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 77597
X-GNU-PR-Package: coreutils
X-GNU-PR-Keywords: 
To: Rahul Sandhu <nvraxn@HIDDEN>
Cc: 77597 <at> debbugs.gnu.org
Received: via spool by 77597-submit <at> debbugs.gnu.org id=B77597.174406383720019
          (code B ref 77597); Mon, 07 Apr 2025 22:11:01 +0000
Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 22:10:37 +0000
Received: from localhost ([127.0.0.1]:57350 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1u1ufs-0005Cn-Iw
	for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:36 -0400
Received: from mail.cs.ucla.edu ([131.179.128.66]:45732)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eggert@HIDDEN>)
 id 1u1ufo-0005C8-BT
 for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:33 -0400
Received: from localhost (localhost [127.0.0.1])
 by mail.cs.ucla.edu (Postfix) with ESMTP id 9724C3C010840;
 Mon,  7 Apr 2025 15:10:25 -0700 (PDT)
Received: from mail.cs.ucla.edu ([127.0.0.1])
 by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10032) with ESMTP
 id 7Ik_aGQ2iTT1; Mon,  7 Apr 2025 15:10:25 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
 by mail.cs.ucla.edu (Postfix) with ESMTP id 50C453C0149F7;
 Mon,  7 Apr 2025 15:10:25 -0700 (PDT)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.cs.ucla.edu 50C453C0149F7
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.ucla.edu;
 s=9D0B346E-2AEB-11ED-9476-E14B719DCE6C; t=1744063825;
 bh=WeTh65MZswn3N8PxrdAYhqRrIdwX7Vqf0Fsod4EpwEk=;
 h=Message-ID:Date:MIME-Version:To:From;
 b=k7CfJYK+Si465z+3dSutENefW8oWtBdtftV/bGFK6Q3LFnFjmKLoEpoaSNUiSxXDp
 pZMeWitv97Wm6Ygfj0R1rKsvsXi1qn2a0kgJeYLIq9ScsL3x6A9257Cz+5s2wjWk2R
 1D9EtzI6zunwZMdYVYRvp4FFBFGz49BCqYvlB5O9dEFGi1b7la3/CYehebshQKzUgA
 s84NjryilDfMNbbaL9wwpeQ/DimnBYyVjXtujaEfyDVma67193AfcwCeZrP48QU67z
 UtOpYIqwhyv2ybBJTEhvip1YdkWH0ZcbbT8F0kPPG8AdLnxh5dzdXPtOkWp7WvtRgw
 ix638uF7dspGw==
X-Virus-Scanned: amavis at mail.cs.ucla.edu
Received: from mail.cs.ucla.edu ([127.0.0.1])
 by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10026) with ESMTP
 id dXj16q2fXL8G; Mon,  7 Apr 2025 15:10:25 -0700 (PDT)
Received: from [131.179.64.200] (Penguin.CS.UCLA.EDU [131.179.64.200])
 by mail.cs.ucla.edu (Postfix) with ESMTPSA id 35A923C010840;
 Mon,  7 Apr 2025 15:10:25 -0700 (PDT)
Message-ID: <41067aa3-0e72-456f-b3f2-7bd713242457@HIDDEN>
Date: Mon, 7 Apr 2025 15:10:24 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
Content-Language: en-US
From: Paul Eggert <eggert@HIDDEN>
Autocrypt: addr=eggert@HIDDEN; keydata=
 xsFNBEyAcmQBEADAAyH2xoTu7ppG5D3a8FMZEon74dCvc4+q1XA2J2tBy2pwaTqfhpxxdGA9
 Jj50UJ3PD4bSUEgN8tLZ0san47l5XTAFLi2456ciSl5m8sKaHlGdt9XmAAtmXqeZVIYX/UFS
 96fDzf4xhEmm/y7LbYEPQdUdxu47xA5KhTYp5bltF3WYDz1Ygd7gx07Auwp7iw7eNvnoDTAl
 KAl8KYDZzbDNCQGEbpY3efZIvPdeI+FWQN4W+kghy+P6au6PrIIhYraeua7XDdb2LS1en3Ss
 mE3QjqfRqI/A2ue8JMwsvXe/WK38Ezs6x74iTaqI3AFH6ilAhDqpMnd/msSESNFt76DiO1ZK
 QMr9amVPknjfPmJISqdhgB1DlEdw34sROf6V8mZw0xfqT6PKE46LcFefzs0kbg4GORf8vjG2
 Sf1tk5eU8MBiyN/bZ03bKNjNYMpODDQQwuP84kYLkX2wBxxMAhBxwbDVZudzxDZJ1C2VXujC
 OJVxq2kljBM9ETYuUGqd75AW2LXrLw6+MuIsHFAYAgRr7+KcwDgBAfwhPBYX34nSSiHlmLC+
 KaHLeCLF5ZI2vKm3HEeCTtlOg7xZEONgwzL+fdKo+D6SoC8RRxJKs8a3sVfI4t6CnrQzvJbB
 n6gxdgCu5i29J1QCYrCYvql2UyFPAK+do99/1jOXT4m2836j1wARAQABzSBQYXVsIEVnZ2Vy
 dCA8ZWdnZXJ0QGNzLnVjbGEuZWR1PsLBlQQTAQgAPwIbAwYLCQgHAwIGFQgCCQoLBBYCAwEC
 HgECF4AWIQR+N5Kp2Kz31jO8FYjtl+kOYqp+NAUCZiLOewUJHWQLDAAKCRDtl+kOYqp+NHGE
 D/9Wmbk+cAaQsYLPGBvyzIjZIRzo/V2p3ZwckVA1VEQivx5azu1cs86qDoVIe45AtwmKOvdV
 wTQd/QeglkZR6D2YPW7UR/7emajyJZZcy+etVTDKoaw1i6/hmd/CpGjUeUSvgoPs6nYR+1lo
 pSXTpaGrh1W0qQHalSkOOwCHG3HtGk9Ve2AERDUYxmcn8/eZHb7xpUJEJMBBI1bx/zcw1EtB
 rjsQ1R1faJ/r/7LPAyV36RLvnbX69PylHKQEbJoaY9aUb2Vpm63ni3FeTA7/3jpPvaSRWHJh
 vPYx6Fm2Ln8pI0Yf/W2B8QMiPTnF/LnH2kvUcf9VXm+1mQJ3fBFU25HZwBhuqZ24IeKymPEt
 BUMQAum97Dto0jSgR2OUvX7z+twhpQEgRGBzPHYwDi4SxF5Z4Q5Y7B7a++HP9tIxG6CVFIwI
 4xVaZud18bPa0YBL+cISmMgxq7h7yoVXl6u3pm9Yiv+W6Lp9QGN8Rw1VuJMOoFCYuoxG8mXO
 TA5b1jvlQ32gHFFhqErDAhNJRsfgrpe9Gok4Ycp+rWljbvS5Wrl0uth5MP7FbaHN2kmTZibq
 KXAd//IqczhDyU6qnW6ao+h4iDBDgYgRbQjmToX/vmIdEMzvPGqWXKhe/q1TYMuOO+IfP+bI
 fyPFH29nVN/o9c4J7myeKvv3HKSXdSVjlh2V787BTQRMgHJkARAApoXrvxP3DIfjCNOtXU/P
 dwMShKdX/RlSs5PfunV1wbKP8herXHrvQdFVqECaTSxmlhzbk8X0PkY9gcVaU2O49T3qsOd1
 cHeF52YFGEt0LhsBeMjgNX5uZ1V76r8gyeVlFpWWb0SIwJUBHrDXexF67upeRb2vdHBjYDNe
 ySn+0B7gFEqvVmZu+LadudDp6kQLjatFvHQHUSGNshBnkkcaTbiI9Pst0GCc2aiznBiPPA2W
 QxAPlPRh3OGTsn5THADmbjqY6FEMLasVX8DSCblMvLwNeO/8SxziBidhqLpJCqdQRWHku5Xx
 gIkGeKOz5OLDvXHWJyafrEYjjkS6Ak6B5z6svKliClWnjHQcjlPzyoFFgKTEfcqDxCj4RY0D
 0DgtFD0NfyeOidrSB/SzTe2hwryQE3rpSiqo+0cGdzh4yAHKYJ+UrXZ4p93ZhjGfKD1xlrNY
 DlWyW9PGmbvqFuDmiIAQf9WD/wzEfICc+F+uDDI+uYkRxUFp92ykmdhDEFg1yjYsU8iGU69a
 Hyvhq36z4zctvbqhRNzOWB1bVJ/dIMDvsExGcXQVDIT7sDNXv0wE3jKSKpp7NDG1oXUXL+2+
 SF99Kjy753AbQSAmH617fyBNwhJWvQYg+mUvPpiGOtses9EXUI3lS4v0MEaPG43flEs1UR+1
 rpFQWVHo1y1OO+sAEQEAAcLBfAQYAQgAJgIbDBYhBH43kqnYrPfWM7wViO2X6Q5iqn40BQJm
 Is58BQkdZAsMAAoJEO2X6Q5iqn40Q68QAJ9GubS/ej30Vc4idoZdc0IyMcL7kQJbMohF+Tyn
 ZE+TGn9WvzP10yLyzoI0vNlcNfP92d2MS//pFjOuANb5mwyiEYA+rDZIdS4ZZpHxCs2sxMC4
 afLCf3kv4aMnTeBvb9na403dlczz9cAacvsmniSFdpb1+BzMpYbybglU5oYMGhYT2nnCRjXN
 6S2nKYt4mjJeeOuxHrdeqQQdVBNYeNfTcPePeqvZ2+bD6u9yxZtaV+wxdpqglosQvjqhOYz7
 h50/ZTSq70/npoCq44TzdJKttaYvlW6ziRz0g4RRAqZyoxjYXiy5qj8r8zXJuB11ApZCGuKn
 /usbji9RYbflAhxFeh4LMmpDVi6BrF30b73Md59K7PuEKN1NxzlWiqqQHZZ9momN0GXLPcGq
 4uyfq7yVEy7wP5PMOh6oqscKklE3gFQtq0P1Ki0xqdF6Fq5LPJc+0Db2CYkVIy7Xaa/f74I3
 sOfQfEeDylVXR5iDfUJEYv/0DYhOr7q5/0b1kh3M4wkrB4C5jVNHjIIj+RsAK90c3t38OhAl
 jiSN7Bkwy24Afy8eIu6wWzvhnsQGpZPB+IffmxT1wkTy8UxZKjUWV0C82iphVgCUUi2f9sDV
 Q/tNcwVWmOS+gdv9Wk6tdGeM+Ee+Qs6YG05jcSoajzF0TL07ajLcayRq2j1Os2CtQ8qu
Organization: UCLA Computer Science Department
In-Reply-To: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

On 4/5/25 18:49, Rahul Sandhu wrote:

> the security context xattr only shows when specifically
> requesting it by passing the arguments -n 'security.selinux' to the
> command line:
> rsandhu@graphite ~ $ getfattr -d -m '' /run/credentials
> <no output>
> rsandhu@graphite ~ $ getfattr -n 'security.selinux' /run/credentials
> getfattr: Removing leading '/' from absolute path names
> # file: run/credentials
> security.selinux="system_u:object_r:tmpfs_t:s0"

I don't observe the problem on my Fedora 41 platform. What happens when 
you run this command?

strace -o tr getfattr -d -m '' /run/credentials

On Fedora, 'tr' ends like this:

...
newfstatat(AT_FDCWD, "/run/credentials", {st_mode=S_IFDIR|0755, 
st_size=200, ...}, AT_SYMLINK_NOFOLLOW) = 0
listxattr("/run/credentials", NULL, 0)  = 17
listxattr("/run/credentials", "security.selinux\0", 256) = 17
getxattr("/run/credentials", "security.selinux", NULL, 0) = 31
getxattr("/run/credentials", "security.selinux", 
"system_u:object_r:var_run_t:s0", 256) = 31
write(2, "getfattr: Removing leading '/' f"..., 56) = 56
...

which means listxattr is operating correctly. What does listxattr do on 
your platform?

If listxattr is returning 0, that would seem to be a bug in listxattr, 
and perhaps we can figure out which platforms have the bug and work 
around it. For example, perhaps we could run 'listxattr("/run", NULL, 
0)' and use a (slower) workaround only if that returns 0. The idea is to 
do the workaround only on the affected platforms.

Message sent to bug-coreutils@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: Paul Eggert <eggert@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 22:11:02 +0000
Resent-Message-ID: <handler.77597.B77597.174406384520056 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 77597
X-GNU-PR-Package: coreutils
X-GNU-PR-Keywords: 
To: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>, Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org
Received: via spool by 77597-submit <at> debbugs.gnu.org id=B77597.174406384520056
          (code B ref 77597); Mon, 07 Apr 2025 22:11:02 +0000
Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 22:10:45 +0000
Received: from localhost ([127.0.0.1]:57354 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1u1ug0-0005DP-3u
	for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:44 -0400
Received: from mail.cs.ucla.edu ([131.179.128.66]:36700)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <eggert@HIDDEN>)
 id 1u1uft-0005CT-Ko
 for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:38 -0400
Received: from localhost (localhost [127.0.0.1])
 by mail.cs.ucla.edu (Postfix) with ESMTP id 0599E3C0149F7;
 Mon,  7 Apr 2025 15:10:32 -0700 (PDT)
Received: from mail.cs.ucla.edu ([127.0.0.1])
 by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10032) with ESMTP
 id ew-5sFArlcdu; Mon,  7 Apr 2025 15:10:31 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
 by mail.cs.ucla.edu (Postfix) with ESMTP id BBC063C0149FA;
 Mon,  7 Apr 2025 15:10:31 -0700 (PDT)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.cs.ucla.edu BBC063C0149FA
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.ucla.edu;
 s=9D0B346E-2AEB-11ED-9476-E14B719DCE6C; t=1744063831;
 bh=Avy02hV4Wij8+uBflAe4ueYxBLpSx/uCw3hf/D3QukM=;
 h=Message-ID:Date:MIME-Version:To:From;
 b=YU1664vRHJ8H5EyqIvGdPOkT+ajDpig8ODrdFL+7RlLL/9+h+tD1FHe01pnueIE5A
 aT3TuUwjuHyF1qWwEJe+M4wssLfkIuD0K1X6jn6/vaI0fZbiDz9iXsc/0PKfqkx85k
 +mjThCGCIyRoUU87DvuT8NXF2wjoZff1RParq/MxfljG8NQQKqG1Wc4GC1S6xLs0Y/
 HHq0IlGkr01XzrcOLxbFBnHi+27loENk4o1UAEboiammdN6tzVLykWe5FDqfJN+j1+
 AgOlasrTsillYuu0BR08U8YBJiqGD1aBFLE47aLiU8QSXTzTdcnNTQUCJcTsyk1DrZ
 GZE3cgNfsITkQ==
X-Virus-Scanned: amavis at mail.cs.ucla.edu
Received: from mail.cs.ucla.edu ([127.0.0.1])
 by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10026) with ESMTP
 id BwQlUN1Cg9fA; Mon,  7 Apr 2025 15:10:31 -0700 (PDT)
Received: from [131.179.64.200] (Penguin.CS.UCLA.EDU [131.179.64.200])
 by mail.cs.ucla.edu (Postfix) with ESMTPSA id A26583C0149F7;
 Mon,  7 Apr 2025 15:10:31 -0700 (PDT)
Message-ID: <40c5a8c3-b1f9-4c91-9651-091cf3170557@HIDDEN>
Date: Mon, 7 Apr 2025 15:10:31 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
 <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN>
 <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN>
 <84c1e24d-22ce-474c-a383-b21136732ab7@HIDDEN>
Content-Language: en-US
From: Paul Eggert <eggert@HIDDEN>
Autocrypt: addr=eggert@HIDDEN; keydata=
 xsFNBEyAcmQBEADAAyH2xoTu7ppG5D3a8FMZEon74dCvc4+q1XA2J2tBy2pwaTqfhpxxdGA9
 Jj50UJ3PD4bSUEgN8tLZ0san47l5XTAFLi2456ciSl5m8sKaHlGdt9XmAAtmXqeZVIYX/UFS
 96fDzf4xhEmm/y7LbYEPQdUdxu47xA5KhTYp5bltF3WYDz1Ygd7gx07Auwp7iw7eNvnoDTAl
 KAl8KYDZzbDNCQGEbpY3efZIvPdeI+FWQN4W+kghy+P6au6PrIIhYraeua7XDdb2LS1en3Ss
 mE3QjqfRqI/A2ue8JMwsvXe/WK38Ezs6x74iTaqI3AFH6ilAhDqpMnd/msSESNFt76DiO1ZK
 QMr9amVPknjfPmJISqdhgB1DlEdw34sROf6V8mZw0xfqT6PKE46LcFefzs0kbg4GORf8vjG2
 Sf1tk5eU8MBiyN/bZ03bKNjNYMpODDQQwuP84kYLkX2wBxxMAhBxwbDVZudzxDZJ1C2VXujC
 OJVxq2kljBM9ETYuUGqd75AW2LXrLw6+MuIsHFAYAgRr7+KcwDgBAfwhPBYX34nSSiHlmLC+
 KaHLeCLF5ZI2vKm3HEeCTtlOg7xZEONgwzL+fdKo+D6SoC8RRxJKs8a3sVfI4t6CnrQzvJbB
 n6gxdgCu5i29J1QCYrCYvql2UyFPAK+do99/1jOXT4m2836j1wARAQABzSBQYXVsIEVnZ2Vy
 dCA8ZWdnZXJ0QGNzLnVjbGEuZWR1PsLBlQQTAQgAPwIbAwYLCQgHAwIGFQgCCQoLBBYCAwEC
 HgECF4AWIQR+N5Kp2Kz31jO8FYjtl+kOYqp+NAUCZiLOewUJHWQLDAAKCRDtl+kOYqp+NHGE
 D/9Wmbk+cAaQsYLPGBvyzIjZIRzo/V2p3ZwckVA1VEQivx5azu1cs86qDoVIe45AtwmKOvdV
 wTQd/QeglkZR6D2YPW7UR/7emajyJZZcy+etVTDKoaw1i6/hmd/CpGjUeUSvgoPs6nYR+1lo
 pSXTpaGrh1W0qQHalSkOOwCHG3HtGk9Ve2AERDUYxmcn8/eZHb7xpUJEJMBBI1bx/zcw1EtB
 rjsQ1R1faJ/r/7LPAyV36RLvnbX69PylHKQEbJoaY9aUb2Vpm63ni3FeTA7/3jpPvaSRWHJh
 vPYx6Fm2Ln8pI0Yf/W2B8QMiPTnF/LnH2kvUcf9VXm+1mQJ3fBFU25HZwBhuqZ24IeKymPEt
 BUMQAum97Dto0jSgR2OUvX7z+twhpQEgRGBzPHYwDi4SxF5Z4Q5Y7B7a++HP9tIxG6CVFIwI
 4xVaZud18bPa0YBL+cISmMgxq7h7yoVXl6u3pm9Yiv+W6Lp9QGN8Rw1VuJMOoFCYuoxG8mXO
 TA5b1jvlQ32gHFFhqErDAhNJRsfgrpe9Gok4Ycp+rWljbvS5Wrl0uth5MP7FbaHN2kmTZibq
 KXAd//IqczhDyU6qnW6ao+h4iDBDgYgRbQjmToX/vmIdEMzvPGqWXKhe/q1TYMuOO+IfP+bI
 fyPFH29nVN/o9c4J7myeKvv3HKSXdSVjlh2V787BTQRMgHJkARAApoXrvxP3DIfjCNOtXU/P
 dwMShKdX/RlSs5PfunV1wbKP8herXHrvQdFVqECaTSxmlhzbk8X0PkY9gcVaU2O49T3qsOd1
 cHeF52YFGEt0LhsBeMjgNX5uZ1V76r8gyeVlFpWWb0SIwJUBHrDXexF67upeRb2vdHBjYDNe
 ySn+0B7gFEqvVmZu+LadudDp6kQLjatFvHQHUSGNshBnkkcaTbiI9Pst0GCc2aiznBiPPA2W
 QxAPlPRh3OGTsn5THADmbjqY6FEMLasVX8DSCblMvLwNeO/8SxziBidhqLpJCqdQRWHku5Xx
 gIkGeKOz5OLDvXHWJyafrEYjjkS6Ak6B5z6svKliClWnjHQcjlPzyoFFgKTEfcqDxCj4RY0D
 0DgtFD0NfyeOidrSB/SzTe2hwryQE3rpSiqo+0cGdzh4yAHKYJ+UrXZ4p93ZhjGfKD1xlrNY
 DlWyW9PGmbvqFuDmiIAQf9WD/wzEfICc+F+uDDI+uYkRxUFp92ykmdhDEFg1yjYsU8iGU69a
 Hyvhq36z4zctvbqhRNzOWB1bVJ/dIMDvsExGcXQVDIT7sDNXv0wE3jKSKpp7NDG1oXUXL+2+
 SF99Kjy753AbQSAmH617fyBNwhJWvQYg+mUvPpiGOtses9EXUI3lS4v0MEaPG43flEs1UR+1
 rpFQWVHo1y1OO+sAEQEAAcLBfAQYAQgAJgIbDBYhBH43kqnYrPfWM7wViO2X6Q5iqn40BQJm
 Is58BQkdZAsMAAoJEO2X6Q5iqn40Q68QAJ9GubS/ej30Vc4idoZdc0IyMcL7kQJbMohF+Tyn
 ZE+TGn9WvzP10yLyzoI0vNlcNfP92d2MS//pFjOuANb5mwyiEYA+rDZIdS4ZZpHxCs2sxMC4
 afLCf3kv4aMnTeBvb9na403dlczz9cAacvsmniSFdpb1+BzMpYbybglU5oYMGhYT2nnCRjXN
 6S2nKYt4mjJeeOuxHrdeqQQdVBNYeNfTcPePeqvZ2+bD6u9yxZtaV+wxdpqglosQvjqhOYz7
 h50/ZTSq70/npoCq44TzdJKttaYvlW6ziRz0g4RRAqZyoxjYXiy5qj8r8zXJuB11ApZCGuKn
 /usbji9RYbflAhxFeh4LMmpDVi6BrF30b73Md59K7PuEKN1NxzlWiqqQHZZ9momN0GXLPcGq
 4uyfq7yVEy7wP5PMOh6oqscKklE3gFQtq0P1Ki0xqdF6Fq5LPJc+0Db2CYkVIy7Xaa/f74I3
 sOfQfEeDylVXR5iDfUJEYv/0DYhOr7q5/0b1kh3M4wkrB4C5jVNHjIIj+RsAK90c3t38OhAl
 jiSN7Bkwy24Afy8eIu6wWzvhnsQGpZPB+IffmxT1wkTy8UxZKjUWV0C82iphVgCUUi2f9sDV
 Q/tNcwVWmOS+gdv9Wk6tdGeM+Ee+Qs6YG05jcSoajzF0TL07ajLcayRq2j1Os2CtQ8qu
Organization: UCLA Computer Science Department
In-Reply-To: <84c1e24d-22ce-474c-a383-b21136732ab7@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

On 4/7/25 12:04, P=C3=A1draig Brady wrote:
> The attached gnulib patch passes quick tests here.

This causes 'ls' to issue more syscalls per file, right? It'd be better=20
if we could figure out a workaround just for the affected platforms, as=20
opposed to slowing down 'ls' for everybody.

Message sent to bug-coreutils@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1)
Resent-From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-coreutils@HIDDEN
Resent-Date: Mon, 07 Apr 2025 22:53:02 +0000
Resent-Message-ID: <handler.77597.B77597.174406635032301 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 77597
X-GNU-PR-Package: coreutils
X-GNU-PR-Keywords: 
To: Paul Eggert <eggert@HIDDEN>, Rahul Sandhu <nvraxn@HIDDEN>
Cc: 77597 <at> debbugs.gnu.org
Received: via spool by 77597-submit <at> debbugs.gnu.org id=B77597.174406635032301
          (code B ref 77597); Mon, 07 Apr 2025 22:53:02 +0000
Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 22:52:30 +0000
Received: from localhost ([127.0.0.1]:57452 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1u1vKP-0008Or-Uc
	for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:52:30 -0400
Received: from mail-wr1-x42e.google.com ([2a00:1450:4864:20::42e]:50323)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.84_2) (envelope-from <pixelbeat@HIDDEN>)
 id 1u1vKN-0008OF-9c
 for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:52:27 -0400
Received: by mail-wr1-x42e.google.com with SMTP id
 ffacd0b85a97d-39c31e4c3e5so3022311f8f.0
 for <77597 <at> debbugs.gnu.org>; Mon, 07 Apr 2025 15:52:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1744066340; x=1744671140; darn=debbugs.gnu.org;
 h=content-transfer-encoding:in-reply-to:from:content-language
 :references:cc:to:subject:user-agent:mime-version:date:message-id
 :sender:from:to:cc:subject:date:message-id:reply-to;
 bh=X0umUCrLOgU8B1f+4KzrfR7ft4GxaAhXVeioXfpeTC4=;
 b=UXoH6kIrjSy1sgzzgx7irgHuagkGUu7LaLR2kttQBGnSGQ52K2a5dMeRh8VwqkCdOi
 9oApwAAi7RYjOb4se7ZA0YMH8yk2MKvFsn388x6OlAqtDGtKY7w4mvDC9Jz/V6pANoxM
 hKFH8XFS4zeuSAjtVyO6WRlWmm1+F2cLwIykLlmPVgjesKimytmCyxOVhtLBroQJ5Jd7
 mIKrxBv1FBjsHbLzxNKjqupsmxuyllzfkbxdNTo7ymp7kxhgM1RxA/FVIH4nzrxWSNhM
 cdBoroxL9Pj/K9+4m4TcW9mCadZsPFtCBmwtIyz2khjvKG1Jwuam35J3yeF53wGg6QLc
 mb6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1744066340; x=1744671140;
 h=content-transfer-encoding:in-reply-to:from:content-language
 :references:cc:to:subject:user-agent:mime-version:date:message-id
 :sender:x-gm-message-state:from:to:cc:subject:date:message-id
 :reply-to;
 bh=X0umUCrLOgU8B1f+4KzrfR7ft4GxaAhXVeioXfpeTC4=;
 b=fFPKIrE7qZn4oJO86lAHcivVluWNfqWPqVAJxIyq7Mx1PWk4WlmeVTZmMd4vQUQE32
 4uGsgXa6emMJCaENFX+C3YoQm9yyLx7XS5rsie/NiUORGMZWQU/mHg7oh4uckMOVCxve
 3vVC/x88ZYfpLlg1z79xJPVAtyXXuSk1o/N9DXR7j8Eo6N02fxKFrNO2m2rfz/qjvM2Z
 nDdtL207SwKC686WUN0J92zFrQOiPFpUUbaDMl+mduS/r1UAnXE7qwv1mRNVACVdV5/Y
 IFqaSxJpO+LJjvPilAsH+gN8F6T34wL0gNCU+g+F/3h59NGwkBeuuO8BAHKzJMTafLdY
 NwCA==
X-Gm-Message-State: AOJu0YyT5QBoMdP2x9bLywPvH25EKvm1SVQI85eHXOnhpJoVQpSAjRrQ
 3DtSs/Sf38q6zjjOVIeFF59qW/Rev10UIBIWlQLZUDQbD0WfyL0R
X-Gm-Gg: ASbGnctYhRd8HNNOOiHJEe3NzAD7D4pWwrftBbnopl7wLr+71FFYryS2BAhmMi0onpP
 Qzz8npr57L4TTL8BpSuFUc6+6XWbyslVKN9MZ2E6qvgNHlAP9sAwN6c2ZqF8wVKZwVYwZM3Jqjk
 bwEGr++UBqFh5adJfunigv8u8GhG9xAICBrEimeHTYoDQHsCeYzElMXGqIIOHSfNEB86P6hNyTE
 SAM9+WYkJ4eDApzhvA8FhFgE6wti2k5U9thIfe2BxT1w8nV9W5TS9963dX5dPghRco/EHabSywY
 rqdmzq+25HAfDB14ghgelVXX6Cm9LiF08iSZFLVjmKZR9rDAhcwHHAJlR2ADU60bIEG3x2sOVsK
 zJnCl1qYwV7HURvtRn+M3P8zj
X-Google-Smtp-Source: AGHT+IFcFjdCI0fahfh6Sj0AfsWfAeZA/tBBL7JF7DnF7xWE40es7MghgXGTU1FZlRIqN9X2w58ECQ==
X-Received: by 2002:adf:b647:0:b0:39c:13fd:ea9c with SMTP id
 ffacd0b85a97d-39cba933220mr9978483f8f.47.1744066340383; 
 Mon, 07 Apr 2025 15:52:20 -0700 (PDT)
Received: from [192.168.1.31]
 (86-44-211-146-dynamic.agg2.lod.rsl-rtd.eircom.net. [86.44.211.146])
 by smtp.googlemail.com with ESMTPSA id
 ffacd0b85a97d-39c30239813sm13086300f8f.101.2025.04.07.15.52.19
 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
 Mon, 07 Apr 2025 15:52:19 -0700 (PDT)
Message-ID: <c7d16a13-79c9-4e81-996a-0f32bcff79cc@HIDDEN>
Date: Mon, 7 Apr 2025 23:52:17 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird Beta
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
 <41067aa3-0e72-456f-b3f2-7bd713242457@HIDDEN>
Content-Language: en-US
From: =?UTF-8?Q?P=C3=A1draig?= Brady <P@HIDDEN>
In-Reply-To: <41067aa3-0e72-456f-b3f2-7bd713242457@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

On 07/04/2025 23:10, Paul Eggert wrote:
> On 4/5/25 18:49, Rahul Sandhu wrote:
> 
>> the security context xattr only shows when specifically
>> requesting it by passing the arguments -n 'security.selinux' to the
>> command line:
>> rsandhu@graphite ~ $ getfattr -d -m '' /run/credentials
>> <no output>
>> rsandhu@graphite ~ $ getfattr -n 'security.selinux' /run/credentials
>> getfattr: Removing leading '/' from absolute path names
>> # file: run/credentials
>> security.selinux="system_u:object_r:tmpfs_t:s0"
> 
> I don't observe the problem on my Fedora 41 platform. What happens when
> you run this command?
> 
> strace -o tr getfattr -d -m '' /run/credentials
> 
> On Fedora, 'tr' ends like this:
> 
> ...
> newfstatat(AT_FDCWD, "/run/credentials", {st_mode=S_IFDIR|0755,
> st_size=200, ...}, AT_SYMLINK_NOFOLLOW) = 0
> listxattr("/run/credentials", NULL, 0)  = 17
> listxattr("/run/credentials", "security.selinux\0", 256) = 17
> getxattr("/run/credentials", "security.selinux", NULL, 0) = 31
> getxattr("/run/credentials", "security.selinux",
> "system_u:object_r:var_run_t:s0", 256) = 31
> write(2, "getfattr: Removing leading '/' f"..., 56) = 56
> ...
> 
> which means listxattr is operating correctly. What does listxattr do on
> your platform?

I get the same for /run/credentials on Fedora 41 (6.13.6-200.fc41.x86_64) here,
but I do repro the issue with /run/initramfs.

   $ strace --trace=/.*xattr.* getfattr -d -m '' /run/initramfs
   listxattr("/run/initramfs", NULL, 0)    = 0

   $ strace --trace=/.*xattr.* getfattr -n 'security.selinux' /run/initramfs
   getxattr("/run/initramfs", "security.selinux", NULL, 0) = 29
   getxattr("/run/initramfs", "security.selinux", "system_u:object_r:tmpfs_t:s0", 256) = 29
   getfattr: Removing leading '/' from absolute path names
   # file: run/initramfs
   security.selinux="system_u:object_r:tmpfs_t:s0"


> If listxattr is returning 0, that would seem to be a bug in listxattr,
> and perhaps we can figure out which platforms have the bug and work
> around it. For example, perhaps we could run 'listxattr("/run", NULL,
> 0)' and use a (slower) workaround only if that returns 0. The idea is to
> do the workaround only on the affected platforms.

Unfortunately that won't work.

   $ strace --trace=/.*xattr.* getfattr -d -m '' /run/
   listxattr("/run/", NULL, 0)             = 17

I'm not sure how we could distinguish this case.

   $ stat /run/initramfs
     File: /run/initramfs
   Size: 60        	Blocks: 0          IO Block: 4096   directory
   Device: 0,26	Inode: 20          Links: 3
   Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
   Context: system_u:object_r:tmpfs_t:s0

   $ stat /run
     File: /run
     Size: 1600      	Blocks: 0          IO Block: 4096   directory
   Device: 0,26	Inode: 1           Links: 58
   Access: (0755/drwxr-xr-x)  Uid: (    0/    root)   Gid: (    0/    root)
   Context: system_u:object_r:var_run_t:s0

Note /run/initramfs is the only problematic entry for me,
and that's the only entry with "tmpfs_t" in the context.

As for efficiency, on SELinux systems listxattr() would generally never return 0,
but yes on others we'd we doing an extra getxattr().
So maybe we class this as a kernel bug and have the kernel
return non 0 for this case, or even ENOTSUP.

cheers,
Pádraig

Last modified: Mon, 7 Apr 2025 23:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.