Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 22:52:30 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 18:52:30 2025
Received: from localhost ([127.0.0.1]:57452 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1u1vKP-0008Or-Uc
for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:52:30 -0400
Received: from mail-wr1-x42e.google.com ([2a00:1450:4864:20::42e]:50323)
by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
(Exim 4.84_2) (envelope-from <pixelbeat@HIDDEN>)
id 1u1vKN-0008OF-9c
for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:52:27 -0400
Received: by mail-wr1-x42e.google.com with SMTP id
ffacd0b85a97d-39c31e4c3e5so3022311f8f.0
for <77597 <at> debbugs.gnu.org>; Mon, 07 Apr 2025 15:52:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1744066340; x=1744671140; darn=debbugs.gnu.org;
h=content-transfer-encoding:in-reply-to:from:content-language
:references:cc:to:subject:user-agent:mime-version:date:message-id
:sender:from:to:cc:subject:date:message-id:reply-to;
bh=X0umUCrLOgU8B1f+4KzrfR7ft4GxaAhXVeioXfpeTC4=;
b=UXoH6kIrjSy1sgzzgx7irgHuagkGUu7LaLR2kttQBGnSGQ52K2a5dMeRh8VwqkCdOi
9oApwAAi7RYjOb4se7ZA0YMH8yk2MKvFsn388x6OlAqtDGtKY7w4mvDC9Jz/V6pANoxM
hKFH8XFS4zeuSAjtVyO6WRlWmm1+F2cLwIykLlmPVgjesKimytmCyxOVhtLBroQJ5Jd7
mIKrxBv1FBjsHbLzxNKjqupsmxuyllzfkbxdNTo7ymp7kxhgM1RxA/FVIH4nzrxWSNhM
cdBoroxL9Pj/K9+4m4TcW9mCadZsPFtCBmwtIyz2khjvKG1Jwuam35J3yeF53wGg6QLc
mb6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1744066340; x=1744671140;
h=content-transfer-encoding:in-reply-to:from:content-language
:references:cc:to:subject:user-agent:mime-version:date:message-id
:sender:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=X0umUCrLOgU8B1f+4KzrfR7ft4GxaAhXVeioXfpeTC4=;
b=fFPKIrE7qZn4oJO86lAHcivVluWNfqWPqVAJxIyq7Mx1PWk4WlmeVTZmMd4vQUQE32
4uGsgXa6emMJCaENFX+C3YoQm9yyLx7XS5rsie/NiUORGMZWQU/mHg7oh4uckMOVCxve
3vVC/x88ZYfpLlg1z79xJPVAtyXXuSk1o/N9DXR7j8Eo6N02fxKFrNO2m2rfz/qjvM2Z
nDdtL207SwKC686WUN0J92zFrQOiPFpUUbaDMl+mduS/r1UAnXE7qwv1mRNVACVdV5/Y
IFqaSxJpO+LJjvPilAsH+gN8F6T34wL0gNCU+g+F/3h59NGwkBeuuO8BAHKzJMTafLdY
NwCA==
X-Gm-Message-State: AOJu0YyT5QBoMdP2x9bLywPvH25EKvm1SVQI85eHXOnhpJoVQpSAjRrQ
3DtSs/Sf38q6zjjOVIeFF59qW/Rev10UIBIWlQLZUDQbD0WfyL0R
X-Gm-Gg: ASbGnctYhRd8HNNOOiHJEe3NzAD7D4pWwrftBbnopl7wLr+71FFYryS2BAhmMi0onpP
Qzz8npr57L4TTL8BpSuFUc6+6XWbyslVKN9MZ2E6qvgNHlAP9sAwN6c2ZqF8wVKZwVYwZM3Jqjk
bwEGr++UBqFh5adJfunigv8u8GhG9xAICBrEimeHTYoDQHsCeYzElMXGqIIOHSfNEB86P6hNyTE
SAM9+WYkJ4eDApzhvA8FhFgE6wti2k5U9thIfe2BxT1w8nV9W5TS9963dX5dPghRco/EHabSywY
rqdmzq+25HAfDB14ghgelVXX6Cm9LiF08iSZFLVjmKZR9rDAhcwHHAJlR2ADU60bIEG3x2sOVsK
zJnCl1qYwV7HURvtRn+M3P8zj
X-Google-Smtp-Source: AGHT+IFcFjdCI0fahfh6Sj0AfsWfAeZA/tBBL7JF7DnF7xWE40es7MghgXGTU1FZlRIqN9X2w58ECQ==
X-Received: by 2002:adf:b647:0:b0:39c:13fd:ea9c with SMTP id
ffacd0b85a97d-39cba933220mr9978483f8f.47.1744066340383;
Mon, 07 Apr 2025 15:52:20 -0700 (PDT)
Received: from [192.168.1.31]
(86-44-211-146-dynamic.agg2.lod.rsl-rtd.eircom.net. [86.44.211.146])
by smtp.googlemail.com with ESMTPSA id
ffacd0b85a97d-39c30239813sm13086300f8f.101.2025.04.07.15.52.19
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Mon, 07 Apr 2025 15:52:19 -0700 (PDT)
Message-ID: <c7d16a13-79c9-4e81-996a-0f32bcff79cc@HIDDEN>
Date: Mon, 7 Apr 2025 23:52:17 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird Beta
Subject: Re: bug#77597: coreutils 9.6: regression in handling security.selinux
attribute for ls(1)
To: Paul Eggert <eggert@HIDDEN>, Rahul Sandhu <nvraxn@HIDDEN>
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
<41067aa3-0e72-456f-b3f2-7bd713242457@HIDDEN>
Content-Language: en-US
From: =?UTF-8?Q?P=C3=A1draig_Brady?= <P@HIDDEN>
In-Reply-To: <41067aa3-0e72-456f-b3f2-7bd713242457@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 77597
Cc: 77597 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
On 07/04/2025 23:10, Paul Eggert wrote:
> On 4/5/25 18:49, Rahul Sandhu wrote:
>
>> the security context xattr only shows when specifically
>> requesting it by passing the arguments -n 'security.selinux' to the
>> command line:
>> rsandhu@graphite ~ $ getfattr -d -m '' /run/credentials
>> <no output>
>> rsandhu@graphite ~ $ getfattr -n 'security.selinux' /run/credentials
>> getfattr: Removing leading '/' from absolute path names
>> # file: run/credentials
>> security.selinux="system_u:object_r:tmpfs_t:s0"
>
> I don't observe the problem on my Fedora 41 platform. What happens when
> you run this command?
>
> strace -o tr getfattr -d -m '' /run/credentials
>
> On Fedora, 'tr' ends like this:
>
> ...
> newfstatat(AT_FDCWD, "/run/credentials", {st_mode=S_IFDIR|0755,
> st_size=200, ...}, AT_SYMLINK_NOFOLLOW) = 0
> listxattr("/run/credentials", NULL, 0) = 17
> listxattr("/run/credentials", "security.selinux\0", 256) = 17
> getxattr("/run/credentials", "security.selinux", NULL, 0) = 31
> getxattr("/run/credentials", "security.selinux",
> "system_u:object_r:var_run_t:s0", 256) = 31
> write(2, "getfattr: Removing leading '/' f"..., 56) = 56
> ...
>
> which means listxattr is operating correctly. What does listxattr do on
> your platform?
I get the same for /run/credentials on Fedora 41 (6.13.6-200.fc41.x86_64) here,
but I do repro the issue with /run/initramfs.
$ strace --trace=/.*xattr.* getfattr -d -m '' /run/initramfs
listxattr("/run/initramfs", NULL, 0) = 0
$ strace --trace=/.*xattr.* getfattr -n 'security.selinux' /run/initramfs
getxattr("/run/initramfs", "security.selinux", NULL, 0) = 29
getxattr("/run/initramfs", "security.selinux", "system_u:object_r:tmpfs_t:s0", 256) = 29
getfattr: Removing leading '/' from absolute path names
# file: run/initramfs
security.selinux="system_u:object_r:tmpfs_t:s0"
> If listxattr is returning 0, that would seem to be a bug in listxattr,
> and perhaps we can figure out which platforms have the bug and work
> around it. For example, perhaps we could run 'listxattr("/run", NULL,
> 0)' and use a (slower) workaround only if that returns 0. The idea is to
> do the workaround only on the affected platforms.
Unfortunately that won't work.
$ strace --trace=/.*xattr.* getfattr -d -m '' /run/
listxattr("/run/", NULL, 0) = 17
I'm not sure how we could distinguish this case.
$ stat /run/initramfs
File: /run/initramfs
Size: 60 Blocks: 0 IO Block: 4096 directory
Device: 0,26 Inode: 20 Links: 3
Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Context: system_u:object_r:tmpfs_t:s0
$ stat /run
File: /run
Size: 1600 Blocks: 0 IO Block: 4096 directory
Device: 0,26 Inode: 1 Links: 58
Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root)
Context: system_u:object_r:var_run_t:s0
Note /run/initramfs is the only problematic entry for me,
and that's the only entry with "tmpfs_t" in the context.
As for efficiency, on SELinux systems listxattr() would generally never return 0,
but yes on others we'd we doing an extra getxattr().
So maybe we class this as a kernel bug and have the kernel
return non 0 for this case, or even ENOTSUP.
cheers,
Pádraig
bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 22:10:45 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 18:10:44 2025 Received: from localhost ([127.0.0.1]:57354 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1u1ug0-0005DP-3u for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:44 -0400 Received: from mail.cs.ucla.edu ([131.179.128.66]:36700) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <eggert@HIDDEN>) id 1u1uft-0005CT-Ko for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:38 -0400 Received: from localhost (localhost [127.0.0.1]) by mail.cs.ucla.edu (Postfix) with ESMTP id 0599E3C0149F7; Mon, 7 Apr 2025 15:10:32 -0700 (PDT) Received: from mail.cs.ucla.edu ([127.0.0.1]) by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10032) with ESMTP id ew-5sFArlcdu; Mon, 7 Apr 2025 15:10:31 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.cs.ucla.edu (Postfix) with ESMTP id BBC063C0149FA; Mon, 7 Apr 2025 15:10:31 -0700 (PDT) DKIM-Filter: OpenDKIM Filter v2.10.3 mail.cs.ucla.edu BBC063C0149FA DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.ucla.edu; s=9D0B346E-2AEB-11ED-9476-E14B719DCE6C; t=1744063831; bh=Avy02hV4Wij8+uBflAe4ueYxBLpSx/uCw3hf/D3QukM=; h=Message-ID:Date:MIME-Version:To:From; b=YU1664vRHJ8H5EyqIvGdPOkT+ajDpig8ODrdFL+7RlLL/9+h+tD1FHe01pnueIE5A aT3TuUwjuHyF1qWwEJe+M4wssLfkIuD0K1X6jn6/vaI0fZbiDz9iXsc/0PKfqkx85k +mjThCGCIyRoUU87DvuT8NXF2wjoZff1RParq/MxfljG8NQQKqG1Wc4GC1S6xLs0Y/ HHq0IlGkr01XzrcOLxbFBnHi+27loENk4o1UAEboiammdN6tzVLykWe5FDqfJN+j1+ AgOlasrTsillYuu0BR08U8YBJiqGD1aBFLE47aLiU8QSXTzTdcnNTQUCJcTsyk1DrZ GZE3cgNfsITkQ== X-Virus-Scanned: amavis at mail.cs.ucla.edu Received: from mail.cs.ucla.edu ([127.0.0.1]) by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10026) with ESMTP id BwQlUN1Cg9fA; Mon, 7 Apr 2025 15:10:31 -0700 (PDT) Received: from [131.179.64.200] (Penguin.CS.UCLA.EDU [131.179.64.200]) by mail.cs.ucla.edu (Postfix) with ESMTPSA id A26583C0149F7; Mon, 7 Apr 2025 15:10:31 -0700 (PDT) Message-ID: <40c5a8c3-b1f9-4c91-9651-091cf3170557@HIDDEN> Date: Mon, 7 Apr 2025 15:10:31 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1) To: =?UTF-8?Q?P=C3=A1draig_Brady?= <P@HIDDEN>, Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN> <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN> <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN> <84c1e24d-22ce-474c-a383-b21136732ab7@HIDDEN> Content-Language: en-US From: Paul Eggert <eggert@HIDDEN> Autocrypt: addr=eggert@HIDDEN; keydata= xsFNBEyAcmQBEADAAyH2xoTu7ppG5D3a8FMZEon74dCvc4+q1XA2J2tBy2pwaTqfhpxxdGA9 Jj50UJ3PD4bSUEgN8tLZ0san47l5XTAFLi2456ciSl5m8sKaHlGdt9XmAAtmXqeZVIYX/UFS 96fDzf4xhEmm/y7LbYEPQdUdxu47xA5KhTYp5bltF3WYDz1Ygd7gx07Auwp7iw7eNvnoDTAl KAl8KYDZzbDNCQGEbpY3efZIvPdeI+FWQN4W+kghy+P6au6PrIIhYraeua7XDdb2LS1en3Ss mE3QjqfRqI/A2ue8JMwsvXe/WK38Ezs6x74iTaqI3AFH6ilAhDqpMnd/msSESNFt76DiO1ZK QMr9amVPknjfPmJISqdhgB1DlEdw34sROf6V8mZw0xfqT6PKE46LcFefzs0kbg4GORf8vjG2 Sf1tk5eU8MBiyN/bZ03bKNjNYMpODDQQwuP84kYLkX2wBxxMAhBxwbDVZudzxDZJ1C2VXujC OJVxq2kljBM9ETYuUGqd75AW2LXrLw6+MuIsHFAYAgRr7+KcwDgBAfwhPBYX34nSSiHlmLC+ KaHLeCLF5ZI2vKm3HEeCTtlOg7xZEONgwzL+fdKo+D6SoC8RRxJKs8a3sVfI4t6CnrQzvJbB n6gxdgCu5i29J1QCYrCYvql2UyFPAK+do99/1jOXT4m2836j1wARAQABzSBQYXVsIEVnZ2Vy dCA8ZWdnZXJ0QGNzLnVjbGEuZWR1PsLBlQQTAQgAPwIbAwYLCQgHAwIGFQgCCQoLBBYCAwEC HgECF4AWIQR+N5Kp2Kz31jO8FYjtl+kOYqp+NAUCZiLOewUJHWQLDAAKCRDtl+kOYqp+NHGE D/9Wmbk+cAaQsYLPGBvyzIjZIRzo/V2p3ZwckVA1VEQivx5azu1cs86qDoVIe45AtwmKOvdV wTQd/QeglkZR6D2YPW7UR/7emajyJZZcy+etVTDKoaw1i6/hmd/CpGjUeUSvgoPs6nYR+1lo pSXTpaGrh1W0qQHalSkOOwCHG3HtGk9Ve2AERDUYxmcn8/eZHb7xpUJEJMBBI1bx/zcw1EtB rjsQ1R1faJ/r/7LPAyV36RLvnbX69PylHKQEbJoaY9aUb2Vpm63ni3FeTA7/3jpPvaSRWHJh vPYx6Fm2Ln8pI0Yf/W2B8QMiPTnF/LnH2kvUcf9VXm+1mQJ3fBFU25HZwBhuqZ24IeKymPEt BUMQAum97Dto0jSgR2OUvX7z+twhpQEgRGBzPHYwDi4SxF5Z4Q5Y7B7a++HP9tIxG6CVFIwI 4xVaZud18bPa0YBL+cISmMgxq7h7yoVXl6u3pm9Yiv+W6Lp9QGN8Rw1VuJMOoFCYuoxG8mXO TA5b1jvlQ32gHFFhqErDAhNJRsfgrpe9Gok4Ycp+rWljbvS5Wrl0uth5MP7FbaHN2kmTZibq KXAd//IqczhDyU6qnW6ao+h4iDBDgYgRbQjmToX/vmIdEMzvPGqWXKhe/q1TYMuOO+IfP+bI fyPFH29nVN/o9c4J7myeKvv3HKSXdSVjlh2V787BTQRMgHJkARAApoXrvxP3DIfjCNOtXU/P dwMShKdX/RlSs5PfunV1wbKP8herXHrvQdFVqECaTSxmlhzbk8X0PkY9gcVaU2O49T3qsOd1 cHeF52YFGEt0LhsBeMjgNX5uZ1V76r8gyeVlFpWWb0SIwJUBHrDXexF67upeRb2vdHBjYDNe ySn+0B7gFEqvVmZu+LadudDp6kQLjatFvHQHUSGNshBnkkcaTbiI9Pst0GCc2aiznBiPPA2W QxAPlPRh3OGTsn5THADmbjqY6FEMLasVX8DSCblMvLwNeO/8SxziBidhqLpJCqdQRWHku5Xx gIkGeKOz5OLDvXHWJyafrEYjjkS6Ak6B5z6svKliClWnjHQcjlPzyoFFgKTEfcqDxCj4RY0D 0DgtFD0NfyeOidrSB/SzTe2hwryQE3rpSiqo+0cGdzh4yAHKYJ+UrXZ4p93ZhjGfKD1xlrNY DlWyW9PGmbvqFuDmiIAQf9WD/wzEfICc+F+uDDI+uYkRxUFp92ykmdhDEFg1yjYsU8iGU69a Hyvhq36z4zctvbqhRNzOWB1bVJ/dIMDvsExGcXQVDIT7sDNXv0wE3jKSKpp7NDG1oXUXL+2+ SF99Kjy753AbQSAmH617fyBNwhJWvQYg+mUvPpiGOtses9EXUI3lS4v0MEaPG43flEs1UR+1 rpFQWVHo1y1OO+sAEQEAAcLBfAQYAQgAJgIbDBYhBH43kqnYrPfWM7wViO2X6Q5iqn40BQJm Is58BQkdZAsMAAoJEO2X6Q5iqn40Q68QAJ9GubS/ej30Vc4idoZdc0IyMcL7kQJbMohF+Tyn ZE+TGn9WvzP10yLyzoI0vNlcNfP92d2MS//pFjOuANb5mwyiEYA+rDZIdS4ZZpHxCs2sxMC4 afLCf3kv4aMnTeBvb9na403dlczz9cAacvsmniSFdpb1+BzMpYbybglU5oYMGhYT2nnCRjXN 6S2nKYt4mjJeeOuxHrdeqQQdVBNYeNfTcPePeqvZ2+bD6u9yxZtaV+wxdpqglosQvjqhOYz7 h50/ZTSq70/npoCq44TzdJKttaYvlW6ziRz0g4RRAqZyoxjYXiy5qj8r8zXJuB11ApZCGuKn /usbji9RYbflAhxFeh4LMmpDVi6BrF30b73Md59K7PuEKN1NxzlWiqqQHZZ9momN0GXLPcGq 4uyfq7yVEy7wP5PMOh6oqscKklE3gFQtq0P1Ki0xqdF6Fq5LPJc+0Db2CYkVIy7Xaa/f74I3 sOfQfEeDylVXR5iDfUJEYv/0DYhOr7q5/0b1kh3M4wkrB4C5jVNHjIIj+RsAK90c3t38OhAl jiSN7Bkwy24Afy8eIu6wWzvhnsQGpZPB+IffmxT1wkTy8UxZKjUWV0C82iphVgCUUi2f9sDV Q/tNcwVWmOS+gdv9Wk6tdGeM+Ee+Qs6YG05jcSoajzF0TL07ajLcayRq2j1Os2CtQ8qu Organization: UCLA Computer Science Department In-Reply-To: <84c1e24d-22ce-474c-a383-b21136732ab7@HIDDEN> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 77597 X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) On 4/7/25 12:04, P=C3=A1draig Brady wrote: > The attached gnulib patch passes quick tests here. This causes 'ls' to issue more syscalls per file, right? It'd be better=20 if we could figure out a workaround just for the affected platforms, as=20 opposed to slowing down 'ls' for everybody.
bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.
Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 22:10:37 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 18:10:37 2025
Received: from localhost ([127.0.0.1]:57350 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1u1ufs-0005Cn-Iw
for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:36 -0400
Received: from mail.cs.ucla.edu ([131.179.128.66]:45732)
by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.84_2) (envelope-from <eggert@HIDDEN>)
id 1u1ufo-0005C8-BT
for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 18:10:33 -0400
Received: from localhost (localhost [127.0.0.1])
by mail.cs.ucla.edu (Postfix) with ESMTP id 9724C3C010840;
Mon, 7 Apr 2025 15:10:25 -0700 (PDT)
Received: from mail.cs.ucla.edu ([127.0.0.1])
by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10032) with ESMTP
id 7Ik_aGQ2iTT1; Mon, 7 Apr 2025 15:10:25 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
by mail.cs.ucla.edu (Postfix) with ESMTP id 50C453C0149F7;
Mon, 7 Apr 2025 15:10:25 -0700 (PDT)
DKIM-Filter: OpenDKIM Filter v2.10.3 mail.cs.ucla.edu 50C453C0149F7
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.ucla.edu;
s=9D0B346E-2AEB-11ED-9476-E14B719DCE6C; t=1744063825;
bh=WeTh65MZswn3N8PxrdAYhqRrIdwX7Vqf0Fsod4EpwEk=;
h=Message-ID:Date:MIME-Version:To:From;
b=k7CfJYK+Si465z+3dSutENefW8oWtBdtftV/bGFK6Q3LFnFjmKLoEpoaSNUiSxXDp
pZMeWitv97Wm6Ygfj0R1rKsvsXi1qn2a0kgJeYLIq9ScsL3x6A9257Cz+5s2wjWk2R
1D9EtzI6zunwZMdYVYRvp4FFBFGz49BCqYvlB5O9dEFGi1b7la3/CYehebshQKzUgA
s84NjryilDfMNbbaL9wwpeQ/DimnBYyVjXtujaEfyDVma67193AfcwCeZrP48QU67z
UtOpYIqwhyv2ybBJTEhvip1YdkWH0ZcbbT8F0kPPG8AdLnxh5dzdXPtOkWp7WvtRgw
ix638uF7dspGw==
X-Virus-Scanned: amavis at mail.cs.ucla.edu
Received: from mail.cs.ucla.edu ([127.0.0.1])
by localhost (mail.cs.ucla.edu [127.0.0.1]) (amavis, port 10026) with ESMTP
id dXj16q2fXL8G; Mon, 7 Apr 2025 15:10:25 -0700 (PDT)
Received: from [131.179.64.200] (Penguin.CS.UCLA.EDU [131.179.64.200])
by mail.cs.ucla.edu (Postfix) with ESMTPSA id 35A923C010840;
Mon, 7 Apr 2025 15:10:25 -0700 (PDT)
Message-ID: <41067aa3-0e72-456f-b3f2-7bd713242457@HIDDEN>
Date: Mon, 7 Apr 2025 15:10:24 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: coreutils 9.6: regression in handling security.selinux attribute
for ls(1)
To: Rahul Sandhu <nvraxn@HIDDEN>
References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
Content-Language: en-US
From: Paul Eggert <eggert@HIDDEN>
Autocrypt: addr=eggert@HIDDEN; keydata=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: UCLA Computer Science Department
In-Reply-To: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 77597
Cc: 77597 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
On 4/5/25 18:49, Rahul Sandhu wrote:
> the security context xattr only shows when specifically
> requesting it by passing the arguments -n 'security.selinux' to the
> command line:
> rsandhu@graphite ~ $ getfattr -d -m '' /run/credentials
> <no output>
> rsandhu@graphite ~ $ getfattr -n 'security.selinux' /run/credentials
> getfattr: Removing leading '/' from absolute path names
> # file: run/credentials
> security.selinux="system_u:object_r:tmpfs_t:s0"
I don't observe the problem on my Fedora 41 platform. What happens when
you run this command?
strace -o tr getfattr -d -m '' /run/credentials
On Fedora, 'tr' ends like this:
...
newfstatat(AT_FDCWD, "/run/credentials", {st_mode=S_IFDIR|0755,
st_size=200, ...}, AT_SYMLINK_NOFOLLOW) = 0
listxattr("/run/credentials", NULL, 0) = 17
listxattr("/run/credentials", "security.selinux\0", 256) = 17
getxattr("/run/credentials", "security.selinux", NULL, 0) = 31
getxattr("/run/credentials", "security.selinux",
"system_u:object_r:var_run_t:s0", 256) = 31
write(2, "getfattr: Removing leading '/' f"..., 56) = 56
...
which means listxattr is operating correctly. What does listxattr do on
your platform?
If listxattr is returning 0, that would seem to be a bug in listxattr,
and perhaps we can figure out which platforms have the bug and work
around it. For example, perhaps we could run 'listxattr("/run", NULL,
0)' and use a (slower) workaround only if that returns 0. The idea is to
do the workaround only on the affected platforms.
bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 19:04:34 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 15:04:34 2025 Received: from localhost ([127.0.0.1]:56915 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1u1rlq-0007Wb-41 for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 15:04:34 -0400 Received: from mail-wm1-x32b.google.com ([2a00:1450:4864:20::32b]:43398) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from <pixelbeat@HIDDEN>) id 1u1rln-0007W8-M5 for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 15:04:32 -0400 Received: by mail-wm1-x32b.google.com with SMTP id 5b1f17b1804b1-43cf628cb14so38259955e9.1 for <77597 <at> debbugs.gnu.org>; Mon, 07 Apr 2025 12:04:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1744052665; x=1744657465; darn=debbugs.gnu.org; h=in-reply-to:content-language:references:cc:to:from:subject :user-agent:mime-version:date:message-id:sender:from:to:cc:subject :date:message-id:reply-to; bh=CJ4G69SMMelUD7HyjdlVipN4g32YsHkrEpVonYGzaD4=; b=HoTfcUHUGahuUC/dHN9R2vwQ8617PDRMDYwh5ABG8Icq9LFoeBq9OuZPTWOLVgF8r+ 5wrc/AN2roncieUmCgC65XnCnsEvqeHsNBdOfnRjtVvqk3/u0T3Sq7ILSuQswNGGEnoJ 8s02dNl+MCccHGBcUhZDmSSUNzKYbqpOYKfni0Uh1Sk+mUFoUHQJzNc45GebNu62vHyQ ixnStompfwlOHW0ExA45KqdlODkkpHTaMUtLDjpMMBxYAbZl4cVm23rs7mK7XKdaqeXO xQerapTTzHWbQ2J2oyYbr2TafBIpOHT3Mh1AIFVL+Mx42q1qSojgmpllGmC08T2MBINV NHWw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744052665; x=1744657465; h=in-reply-to:content-language:references:cc:to:from:subject :user-agent:mime-version:date:message-id:sender:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=CJ4G69SMMelUD7HyjdlVipN4g32YsHkrEpVonYGzaD4=; b=SSltzsbD3aunTFdOf5CvLzpV8v7NF2BVX/CGZUxDXVZTiPIi6S8uJoNvNls05HtnaN TmwZNTNzTKW3SGg+NGMcQ93sg61DT2GZixlRDLfIN/YeNzEvrbqOY8fQvsu5u0lBhbg0 8/Edy6E96WJQbf/BLl7SO3ohJoVOBbD5oiFRyZthnKxMCwkwu3iTtktsbTuNWjSISVF/ SkPdWxGK3ciGb+tAa2R8TqOWF4LVl2oKoNtdgfkGKVLD3h3c3901IXc7tRHX8bRT6Rwy BU7RzsK32tiND/X6A0kiWCe0/Zc8Fnhk9WmKGTf2r+dKv46Kq+jXucf3xXfvmsgSWTpg vf+A== X-Forwarded-Encrypted: i=1; AJvYcCUVUZj5Fn1ESGLLdnUMrYgKZNPUeZOEbuQpXMP4kSg5Cq5NO5fBRAkJ+DmcwqqoWPPhwYXrUg==@debbugs.gnu.org X-Gm-Message-State: AOJu0Yxe1FRgUHbz2fPt+x+iweFkS2y4aXTRIezdhuzV+Ww2HdGiQ3gF uy0yrVuYMlOTTJNGUfiPAmGS9M7Ru+SwpIquRb44FLH04xbQQ6ib X-Gm-Gg: ASbGncuqeqFsr3mgLrkYZz7FvNeExMhn8kZ8ydqzUI36lp92AC+tEtGm0Oktl/zZwya ubBvv8OW+OZlF99uRHKZLOaybMKZBgXFaYDohpQylf7LlcJKscyOQu8uQxDtk+bBWvp5lpXVDga esgy+DT90opqL5ivpyRzEeSrScwCommPCcIT3ikzVfLTy1NfpIBQTN8a8msb4HiPZQjZBZu+Z3U pRqLoBMHBIa/Rye9jheuPSwrEoFygvt83bgK8PM6XTUHYsrvmJjRJsJH70SeW2H8NSltfZ5WdTA 8aj+WAwDDFC5dgIfr5qm2U88/Fv9V3kvvSSwBs5BLSRWlfgL/nbJUZ2RkQPHbCbw/aKcIc/vCT+ cSHyGnm4ByiL3CRzpC4YwwG0y X-Google-Smtp-Source: AGHT+IEUDDK6zjeNUB0aPSbBHcYJ7PMLqar92RBQWDeMQLgfQGB98UnAeTZlF36tXgVTPWokGPCu7A== X-Received: by 2002:a05:6000:4616:b0:39b:f44b:e176 with SMTP id ffacd0b85a97d-39d821116bemr536206f8f.24.1744052665285; Mon, 07 Apr 2025 12:04:25 -0700 (PDT) Received: from [192.168.1.19] (86-44-211-146-dynamic.agg2.lod.rsl-rtd.eircom.net. [86.44.211.146]) by smtp.googlemail.com with ESMTPSA id ffacd0b85a97d-39d75ac6d66sm6573783f8f.14.2025.04.07.12.04.24 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 07 Apr 2025 12:04:24 -0700 (PDT) Content-Type: multipart/mixed; boundary="------------QDKrD3K3fxZU0nBNSQJfWCyg" Message-ID: <84c1e24d-22ce-474c-a383-b21136732ab7@HIDDEN> Date: Mon, 7 Apr 2025 20:04:23 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Beta Subject: Re: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1) From: =?UTF-8?Q?P=C3=A1draig_Brady?= <P@HIDDEN> To: Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN> <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN> <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN> Content-Language: en-US In-Reply-To: <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN> X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 77597 Cc: eggert@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) This is a multi-part message in MIME format. --------------QDKrD3K3fxZU0nBNSQJfWCyg Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 07/04/2025 19:22, Pádraig Brady wrote: > On 07/04/2025 19:03, Pádraig Brady wrote: >> On 06/04/2025 02:49, Rahul Sandhu wrote: >>> Hey, >>> >>> coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware >>> builds. `ls -Z` fails to obtain the security context for certain >>> filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with >>> refpolicy: >>> >>> rsandhu@graphite ~ $ ls -alZ /run/ | grep '?' >>> drwxr-xr-x 3 root root ? 60 Apr 5 16:38 credentials >>> drwxr-xr-x 3 root root ? 80 Apr 2 16:30 initramfs >>> drwxr-xr-x 2 root root ? 40 Apr 2 16:23 modprobe.d >> >> This may be fixed with https://github.com/coreutils/coreutils/commit/cb2abbac7 >> >> Could you try the latest snapshot to see if it fixes this for you? >> >> wget https://pixelbeat.org/cu/coreutils-ss.tar.xz >> tar -xf coreutils-ss.tar.xz >> cd coreutils-9.6.53-14af8/ >> ./configure && make -j4 >> src/ls -alZ /run/ >> > > Actually sorry the above will not address this. > I'll have a deeper look now. The attached gnulib patch passes quick tests here. I'll think some more about it and apply later. thanks, Pádraig --------------QDKrD3K3fxZU0nBNSQJfWCyg Content-Type: text/x-patch; charset=UTF-8; name="gnulib-selinux-empty-listxattr.patch" Content-Disposition: attachment; filename="gnulib-selinux-empty-listxattr.patch" Content-Transfer-Encoding: base64 LS0tIC9ob21lL3BhZHJhaWcvZ2l0L2dudWxpYi9saWIvZmlsZS1oYXMtYWNsLmMJMjAyNS0w My0yMSAxMTo1Mzo0My4yMTE1Njk5NDggKzAwMDAKKysrIGxpYi9maWxlLWhhcy1hY2wuYwky MDI1LTA0LTA3IDE4OjU0OjQ1LjU4NjgzMjM5NCArMDAwMApAQCAtNTAsNiArNTAsNyBAQAog IyAgaW5jbHVkZSA8c2VsaW51eC9zZWxpbnV4Lmg+CiAjIGVuZGlmCiAjIGluY2x1ZGUgPHN0 ZGNrZGludC5oPgorIyBpbmNsdWRlIDxzdGRpbnQuaD4KICMgaW5jbHVkZSA8c3RyaW5nLmg+ CiAjIGluY2x1ZGUgPGFycGEvaW5ldC5oPgogIyBpbmNsdWRlIDxzeXMveGF0dHIuaD4KQEAg LTEwMiwxMyArMTAzLDE3IEBACiAgICBUaGlzIGlzIHRoZSBjYXNlIHdoZW4gW2xdbGlzdHhh dHRyIGZhaWxlZCB3aXRoIEUyQklHLAogICAgb3IgaXMgbm90IHN1cHBvcnRlZCAoIWFjbF9l cnJub192YWxpZCgpKSwgb3IgZmFpbGVkIHdpdGggRUFDQ0VTCiAgICB3aGljaCBpbiBMaW51 eCBrZXJuZWwgNi4xMiBORlMgY2FuIG1lYW4gbWVyZWx5IHRoYXQgd2UgbGFjayByZWFkIGFj Y2Vzcy4KKyAgIEFsc28gYWktPnNpemUgPT0gMCB3YXMgc2VlbiB3aXRoIGNlcnRhaW4gZmls ZSBzeXN0ZW0gb2JqZWN0cyBvbiBMaW51eCwKKyAgIGxpa2UgL3J1bi9pbml0cmFtZnMgd2hl cmUgbGlzdHhhdHRyKCkgcmV0dXJucyAwCisgICBidXQgZ2V0eGF0dHIoInNlY3VyaXR5LnNl bGludXgiKSByZXR1cm5zIGRhdGEuCiAqLwogCiBzdGF0aWMgYm9vbAogYWNsaW5mb19tYXlf aW5kaWNhdGVfeGF0dHIgKHN0cnVjdCBhY2xpbmZvIGNvbnN0ICphaSkKIHsKLSAgcmV0dXJu IGFpLT5zaXplIDwgMCAmJiAoIWFjbF9lcnJub192YWxpZCAoYWktPnUuZXJyKQotICAgICAg ICAgICAgICAgICAgICAgICAgICB8fCBhaS0+dS5lcnIgPT0gRUFDQ0VTIHx8IGFpLT51LmVy ciA9PSBFMkJJRyk7CisgIHJldHVybiBhaS0+c2l6ZSA9PSAwCisgICAgICAgICB8fCAoYWkt PnNpemUgPCAwICYmICghYWNsX2Vycm5vX3ZhbGlkIChhaS0+dS5lcnIpCisgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB8fCBhaS0+dS5lcnIgPT0gRUFDQ0VTIHx8IGFpLT51LmVy ciA9PSBFMkJJRykpOwogfQogCiAvKiBEb2VzIE5BTUUgaGF2ZSBYQVRUUj8gICovCkBAIC0y MDYsMTMgKzIxMSwxMiBAQAogICAgICAgICB9CiAgICAgfQogCi0gIC8qIEEgc2VjdXJpdHkg Y29udGV4dCBjYW4gZXhpc3Qgb25seSBpZiBleHRlbmRlZCBhdHRyaWJ1dGVzIGRvLiAgKi8K ICAgaWYgKGZsYWdzICYgQUNMX0dFVF9TQ09OVEVYVAogICAgICAgJiYgKDAgPCBhaS0+c2l6 ZSB8fCBhY2xpbmZvX21heV9pbmRpY2F0ZV94YXR0ciAoYWkpKSkKICAgICB7CiAgICAgICBp ZiAoaXNfc21hY2tfZW5hYmxlZCAoKSkKICAgICAgICAgewotICAgICAgICAgIGlmIChhaS0+ c2l6ZSA8IDAgfHwgYWNsaW5mb19oYXNfeGF0dHIgKGFpLCBYQVRUUl9OQU1FX1NNQUNLKSkK KyAgICAgICAgICBpZiAoYWktPnNpemUgPD0gMCB8fCBhY2xpbmZvX2hhc194YXR0ciAoYWks IFhBVFRSX05BTUVfU01BQ0spKQogICAgICAgICAgICAgewogICAgICAgICAgICAgICBzc2l6 ZV90IHIgPSBzbWFja19uZXdfbGFiZWxfZnJvbV9wYXRoIChuYW1lLCAic2VjdXJpdHkuU01B Q0s2NCIsCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIGZsYWdzICYgQUNMX1NZTUxJTktfRk9MTE9XLApAQCAtMjIzLDcgKzIyNyw3IEBA CiAgICAgICBlbHNlCiAgICAgICAgIHsKICMgaWYgVVNFX1NFTElOVVhfU0VMSU5VWF9ICi0g ICAgICAgICAgaWYgKGFpLT5zaXplIDwgMCB8fCBhY2xpbmZvX2hhc194YXR0ciAoYWksIFhB VFRSX05BTUVfU0VMSU5VWCkpCisgICAgICAgICAgaWYgKGFpLT5zaXplIDw9IDAgfHwgYWNs aW5mb19oYXNfeGF0dHIgKGFpLCBYQVRUUl9OQU1FX1NFTElOVVgpKQogICAgICAgICAgICAg ewogICAgICAgICAgICAgICBzc2l6ZV90IHIgPQogICAgICAgICAgICAgICAgICgoZmxhZ3Mg JiBBQ0xfU1lNTElOS19GT0xMT1cgPyBnZXRmaWxlY29uIDogbGdldGZpbGVjb24pCg== --------------QDKrD3K3fxZU0nBNSQJfWCyg--
bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 18:22:59 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 14:22:59 2025 Received: from localhost ([127.0.0.1]:56837 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1u1r7W-0004HS-8n for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 14:22:59 -0400 Received: from mail-wm1-x32f.google.com ([2a00:1450:4864:20::32f]:44416) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from <pixelbeat@HIDDEN>) id 1u1r7T-0004Gu-Po for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 14:22:52 -0400 Received: by mail-wm1-x32f.google.com with SMTP id 5b1f17b1804b1-43cfe574976so32419765e9.1 for <77597 <at> debbugs.gnu.org>; Mon, 07 Apr 2025 11:22:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1744050165; x=1744654965; darn=debbugs.gnu.org; h=content-transfer-encoding:in-reply-to:content-language:references :cc:to:from:subject:user-agent:mime-version:date:message-id:sender :from:to:cc:subject:date:message-id:reply-to; bh=Xv+qdg0iOOpkEfF/U+vgseqzFnCsiAZfyVLoxKeE9iA=; b=TqFxW4CKJLoB0Rj75SNBrsnCMvhr1xkM9PcKoLLbLE1G82G07ApMePk2p8xAdkAXBc OI2VVZoR6GVCRoKT4c6cMlpAK7EfDKVxvTzCzCQVAUpyG1tL0bUkLW2mphWYwCXr8Aeh 2Q8V6uYIG86L3kHhv+w6qnERtMpoRHKC3nOJctBReRABu9X6eZ1sJmk6iJK178s4dWG6 YVUipDho4uo+MQXEHDdfRck4TiLt0rcdCsEXQhnbyBS/Ss+lOxDHJ26d64LIZBY3piGP 6HN0Kb+4WhQh0BuQzcd4+QM3HMlJtpweC0iC7/rznTjmhJPwG5kl6BbSnA+FuW6oBvEV FxVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744050165; x=1744654965; h=content-transfer-encoding:in-reply-to:content-language:references :cc:to:from:subject:user-agent:mime-version:date:message-id:sender :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Xv+qdg0iOOpkEfF/U+vgseqzFnCsiAZfyVLoxKeE9iA=; b=NeS8TUEUXKZQMBV2vIU1C+1ZYvyZ8EGH1TLk6gb0XSKDm9W7oGJGVbuZ35HPnaAa0X NcrMSxkTYUT9SuZDRaWNHzPFOZc46QcxzLHnzmj4eB6erOGM6iBeUomE2TgzZKLqLPLL ZsV1Jvk2M2KfdHLuKMddH/XW0uWQ3p/VY0D3M+M1QZnBQv/5nKMOpsoP9sWQEnq2R6cu 01P/GT4mYq72z89B/rTf1aH6cUFzUoPFKo//aco+O+E+CsgUhIRAfUOdP8mvXu2jiRG0 YZF/Xhs6BWl1VrhYF12EleAh6xr+Aqw+U2CBCdhoHTGyzA6GVnTIEHLPdlrfPj1GYngf BpAQ== X-Forwarded-Encrypted: i=1; AJvYcCXc35CuKUxEmRi/lH0cmvl5yRm4Y9a72n/mtU0r9bxVW03/mV4cgOgzwzcgoxvLHjdlOcW3xA==@debbugs.gnu.org X-Gm-Message-State: AOJu0YwdCuy5GaSHLzSwLq6uF5hYBJbRCXyp6Y0hGJ4uNmTbeWUd5F21 b9LFBRCFTxzeqa+ccYaM0h30yb+cxB3Rwj0++viZ80eU5Mfyw1bE X-Gm-Gg: ASbGncuPTuZ4TwxFvEno72kjg/xyauKQ0zr16Ns27XTu4iUbLDcbT+nhm3EdYRofgRI UXwI06QFIy9B7t55rwWkY0trOk9UtE09f0mZOf+guCz6ZRZmdaiD6tTy3kVOIAEX+T3eSbJsSua rHwBNhiRNpZRHiD34S2JHy0IbvPcmsZaXLDgFhi48+8pGogd5zwgMifLCmP4zUxE0i/5uzQkS6X 1wb3U45+PyDTTpAHRsv0bPYpKOD7e92X7qtUCQ+sTjTW+v4eQ1AceEF2G6vkQKqoTUEeSr0LSis /ErdFu16t28o96ZftXvz7M+gE2RsrEpajfetSeIQQ8wEWFCU5WnlOdesg8qvhAh/CrUuYyCed5P 8cVbh8ypu5lrnoVRtr7yF0eMw X-Google-Smtp-Source: AGHT+IFH3Du3yLHT15mQ/cO0O5u+Tymc9oIm18XAlnmCHAtWtpMZnFs/GykLO+b1+XslzMyBloFyJw== X-Received: by 2002:a05:6000:440e:b0:39c:1257:feba with SMTP id ffacd0b85a97d-39cba9865e0mr6915600f8f.58.1744050165321; Mon, 07 Apr 2025 11:22:45 -0700 (PDT) Received: from [192.168.1.19] (86-44-211-146-dynamic.agg2.lod.rsl-rtd.eircom.net. [86.44.211.146]) by smtp.googlemail.com with ESMTPSA id ffacd0b85a97d-39d7c6d838bsm2663854f8f.69.2025.04.07.11.22.44 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 07 Apr 2025 11:22:44 -0700 (PDT) Message-ID: <3be0dfc6-2424-47bd-80c2-115ab037566c@HIDDEN> Date: Mon, 7 Apr 2025 19:22:43 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Beta Subject: Re: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1) From: =?UTF-8?Q?P=C3=A1draig_Brady?= <P@HIDDEN> To: Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN> <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN> Content-Language: en-US In-Reply-To: <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 77597 Cc: eggert@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) On 07/04/2025 19:03, Pádraig Brady wrote: > On 06/04/2025 02:49, Rahul Sandhu wrote: >> Hey, >> >> coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware >> builds. `ls -Z` fails to obtain the security context for certain >> filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with >> refpolicy: >> >> rsandhu@graphite ~ $ ls -alZ /run/ | grep '?' >> drwxr-xr-x 3 root root ? 60 Apr 5 16:38 credentials >> drwxr-xr-x 3 root root ? 80 Apr 2 16:30 initramfs >> drwxr-xr-x 2 root root ? 40 Apr 2 16:23 modprobe.d > > This may be fixed with https://github.com/coreutils/coreutils/commit/cb2abbac7 > > Could you try the latest snapshot to see if it fixes this for you? > > wget https://pixelbeat.org/cu/coreutils-ss.tar.xz > tar -xf coreutils-ss.tar.xz > cd coreutils-9.6.53-14af8/ > ./configure && make -j4 > src/ls -alZ /run/ > Actually sorry the above will not address this. I'll have a deeper look now. thanks, Pádraig
bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.Received: (at 77597) by debbugs.gnu.org; 7 Apr 2025 18:03:20 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 14:03:20 2025 Received: from localhost ([127.0.0.1]:56805 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1u1qoZ-0002l8-Oo for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 14:03:20 -0400 Received: from mail-wr1-x435.google.com ([2a00:1450:4864:20::435]:48180) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from <pixelbeat@HIDDEN>) id 1u1qoW-0002kY-El for 77597 <at> debbugs.gnu.org; Mon, 07 Apr 2025 14:03:17 -0400 Received: by mail-wr1-x435.google.com with SMTP id ffacd0b85a97d-39bf44be22fso3164563f8f.0 for <77597 <at> debbugs.gnu.org>; Mon, 07 Apr 2025 11:03:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1744048990; x=1744653790; darn=debbugs.gnu.org; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:from:to:cc:subject:date:message-id:reply-to; bh=ax9eROvlxmEDk9sNgf3ZiWCZ7oQj/fgSksAvtrFxKzs=; b=BuBM3YKY9KR3Nfx7lV6MLKKU/SLAL41W9PoAlFUMr3HomtyIbGEv/vO+S7f3dFztNK qsq18o49QiW1+t1PP/01/GIb0vZsgDrn5J5mP1N7tn0YArXCacMgST4yd3H7QIrJLcCB C7Dxo/k/AiheRvqYI1ogKemURz/gmvUmyEicKP6IplxHYf8/Q/oQlh75V+3BA5Vp72ZF 1er4zSiYegclZ9mPn87XOvUmEBA9xMkaZ3OLAgVnNTUJV2Cw48YJWuwA+XxtJd4yPMjz 5TJUpiQ8fV2buhfKURGNtymtg4hVcypnpd2lh0sgrXzhkhh4jrg01ZElBVV248FG9oaR M0Ig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1744048990; x=1744653790; h=content-transfer-encoding:in-reply-to:from:content-language :references:cc:to:subject:user-agent:mime-version:date:message-id :sender:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=ax9eROvlxmEDk9sNgf3ZiWCZ7oQj/fgSksAvtrFxKzs=; b=hIHONb5Ud9mdcszrItA6/00YQmZq3dab+u+dShGYeuD9f0uZk9248EpIyiFWQhltBV qp/OlKWZ37V/X/zDCt7ixOOLXEvBf7gLVcI+93KgNEqBd3ulhZyY+n3BUAEL7r791tN8 BaxRTi/qJaTrWnvj0TK7O6rGW8kfUMBhDabCuhHE7FudpfDWpUhlR7AvcnK3hIXInRJb 0tU/lhnZrEpT/x0Cl/HuTR8G8PfEWfaKNwzHmwwA3qG1IheXcZSxoiQ1o8VaZQV+8AnF FKYBNEQ2RA1F5nWTPU8eS8s7+0gcVJvmFXqQA0OmQskDGEp1BBmfF8Lt26ti7vf32hTg Ju+w== X-Forwarded-Encrypted: i=1; AJvYcCU58v5+8SIr+Eb2lKu+trDmvODuSQoSI8LeQ1kzAO++JBKO6/sZMW3llouRMrFVf46o42HzuQ==@debbugs.gnu.org X-Gm-Message-State: AOJu0YwuzRjQrRVZqUfb3kP1i9w9+r4tYr8Hstx3qxQepdmsiDvuDH6h wy1KQRGGI8Oqjj6f+NHVYDuDuh9+WoEggrkSbp8GdApD435frUE5JZY2UQ== X-Gm-Gg: ASbGncvCveqMmF2ymDpeHSbHCCgGfaF7k7Abt4o13FmpVED4/vgMPTEodTql8zi8zmR BNjQKxNklTzIZBP+dF+YLTzY2MQZMhk9TsBPetaxzHPcjWznZKgOdJJFTq95QrDrOOQH38r2/Tb r78FVqtjeCL2JgW9LyVmAiSbRud57NOX+BLolndDwomesll3cZ0j1jCmBHRQJ9Mh3xG97AFz+HW AkkBy7saNuY2idOJVcNcYOaRN2MUyIZMgDdFjS9qQ6iO0tP8hb51Ex+5novzkx9WyFjIkFvrm75 PuOKMvqOlAlhIiNHa2qDlDErtaFtceTLVqGgOnriyBW8veUQMduWLZSeaHXINEnrtDwKoBnpBGt uAou8VH9JFG9gKKEZ/kVfn4PC X-Google-Smtp-Source: AGHT+IE/Zw2bAJXdB+d6YD1TRpuv2KBAVg+Thg/mhumyEAh0BP4IvYHJ9ejMP+1c5vZCV63Q584EkA== X-Received: by 2002:a05:6000:18ac:b0:391:3d97:bd33 with SMTP id ffacd0b85a97d-39d6fc2850dmr7513346f8f.13.1744048990134; Mon, 07 Apr 2025 11:03:10 -0700 (PDT) Received: from [192.168.1.18] (86-44-211-146-dynamic.agg2.lod.rsl-rtd.eircom.net. [86.44.211.146]) by smtp.googlemail.com with ESMTPSA id ffacd0b85a97d-39c301a727bsm12664100f8f.27.2025.04.07.11.03.09 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 07 Apr 2025 11:03:09 -0700 (PDT) Message-ID: <e810ad56-2ebe-4eae-b081-4487eadf3cd2@HIDDEN> Date: Mon, 7 Apr 2025 19:03:08 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Beta Subject: Re: bug#77597: coreutils 9.6: regression in handling security.selinux attribute for ls(1) To: Rahul Sandhu <nvraxn@HIDDEN>, 77597 <at> debbugs.gnu.org References: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN> Content-Language: en-US From: =?UTF-8?Q?P=C3=A1draig_Brady?= <P@HIDDEN> In-Reply-To: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 77597 Cc: eggert@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) On 06/04/2025 02:49, Rahul Sandhu wrote: > Hey, > > coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware > builds. `ls -Z` fails to obtain the security context for certain > filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with > refpolicy: > > rsandhu@graphite ~ $ ls -alZ /run/ | grep '?' > drwxr-xr-x 3 root root ? 60 Apr 5 16:38 credentials > drwxr-xr-x 3 root root ? 80 Apr 2 16:30 initramfs > drwxr-xr-x 2 root root ? 40 Apr 2 16:23 modprobe.d This may be fixed with https://github.com/coreutils/coreutils/commit/cb2abbac7 Could you try the latest snapshot to see if it fixes this for you? wget https://pixelbeat.org/cu/coreutils-ss.tar.xz tar -xf coreutils-ss.tar.xz cd coreutils-9.6.53-14af8/ ./configure && make -j4 src/ls -alZ /run/ thanks, Pádraig.
bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.
Received: (at submit) by debbugs.gnu.org; 7 Apr 2025 05:00:01 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Apr 07 01:00:01 2025
Received: from localhost ([127.0.0.1]:51550 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1u1eaX-0003BV-1e
for submit <at> debbugs.gnu.org; Mon, 07 Apr 2025 01:00:01 -0400
Received: from lists.gnu.org ([2001:470:142::17]:43314)
by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.84_2) (envelope-from <nvraxn@HIDDEN>) id 1u1F8o-00012b-TI
for submit <at> debbugs.gnu.org; Sat, 05 Apr 2025 21:49:43 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <nvraxn@HIDDEN>) id 1u1F8j-00046m-Fo
for bug-coreutils@HIDDEN; Sat, 05 Apr 2025 21:49:37 -0400
Received: from mail-ed1-x535.google.com ([2a00:1450:4864:20::535])
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
(Exim 4.90_1) (envelope-from <nvraxn@HIDDEN>) id 1u1F8h-0002lq-Os
for bug-coreutils@HIDDEN; Sat, 05 Apr 2025 21:49:37 -0400
Received: by mail-ed1-x535.google.com with SMTP id
4fb4d7f45d1cf-5e5e63162a0so5297769a12.3
for <bug-coreutils@HIDDEN>; Sat, 05 Apr 2025 18:49:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1743904174; x=1744508974; darn=gnu.org;
h=subject:cc:to:from:message-id:date:content-transfer-encoding
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=7U7OVXpDTO7FiGC9HO4nxIkphO4KMjOnkxtpxVIzmkw=;
b=SwXMsKca8uMjOtVgceGNu84iYbyWRhPhERe7l4gFTxxOFW5vTnvqunUwBo+xSeB0q7
QsVeQ+9tU7Ve9et/lK/bHRBevWdFbwnr6otvpMbhwlNIUPQncvrlsMo3UeHm/6LlFRhg
+pOAFArV1t6gKU9M6wv8C892HJcSMQ89O7vI4z07Co+Q8Th0eaklQzCPg3nhOzXPdjkZ
0Lys7vPaa2jVz2OGPWznTQ3ZDfG1PD834u05SWb/0iHkC1Jewa6hUnWo/uI1NZuMxEC1
zRCY7X7PhXUgRzfzaJJGDb09OrOGuv4Z7Jge01tvXEQ9S330K5nCpG+D4zLSLZoUNcaF
5TgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743904174; x=1744508974;
h=subject:cc:to:from:message-id:date:content-transfer-encoding
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=7U7OVXpDTO7FiGC9HO4nxIkphO4KMjOnkxtpxVIzmkw=;
b=XtKaL7ubtOfzZScGjgqa8O/MOxPlKpciL2pMC1eVbgWkK9xBur+HTzpzJaonqPdtdR
DmQbIvXPCGAqSINAskra0Q3V2Bv0VO30BQiI3gIJ8rliG+Fca0gqtUQL6MJMsoAOyZcd
uPNlXDKe/c0pjslVYGpm7XeORk7iJOFUBCkXB2QM4X1mdxwmZ+OaOXjETOoum83ivRF1
zJyV1RaLSZY1hI3KGpk9Rhk7+jv/sBGLmEzDl5v6LQcL5NyBFgVS6W9NZNh6bE7kHtnR
19wlyxQnPu1D644CC8rqb37uLzTjJa7qQMqY64bwLuZmtBKWtnobeQZyFaPudTLIeUJA
Ztig==
X-Gm-Message-State: AOJu0YzuMJRpMvBFWIdT0YbCB0aak2S1bjqh/kIyauPf1bOYGvb07Y8H
v1ESolElIYrF75c7IY+51gfz6SjthTAw8RZUCM0d1sSaBde6nMjQ9CtSIlf1
X-Gm-Gg: ASbGncv/iDfRuNZ1yjldmwWuzeJbsTNZ4A/7/0Y3LiUMbLJyaM2nvkGO04X+kHViQ/0
M6ZtSvsnbwNTsM1I2guOv9a7BtpoALBOyHxGzx6m8IIECjBROuirB0KQSosqyPTFoiqRJbR2W+8
1N8liNq0GZuc/l9DU/mnD99yOaFvuxpKhBL8KLtOyWZm/8ZFuQzTkBDzeVt9djraRCEtvGT3e4b
HLs0D8vAyTazZ04Hv7EEfPQM3c4Kts9zBsJgFYeeWjUCW4qPjqepJ/1NVqNqUZfcUHyb/jlZtwR
FiU+mOlmNWNROUFCm+IDOQHPDYjzokYYwlI=
X-Google-Smtp-Source: AGHT+IH3pmxAnPJ4djlkfUtmuRBQZsdsKiMqYJM3SqcNIuBUKCE4TrPvf7B7hhr2sMx5ZDqf8YtwRg==
X-Received: by 2002:a17:907:2cc6:b0:ac6:b815:83ee with SMTP id
a640c23a62f3a-ac7d1c35d38mr716803366b.43.1743904173484;
Sat, 05 Apr 2025 18:49:33 -0700 (PDT)
Received: from localhost ([81.79.13.113]) by smtp.gmail.com with ESMTPSA id
a640c23a62f3a-ac7c01c1061sm502868266b.181.2025.04.05.18.49.32
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Sat, 05 Apr 2025 18:49:33 -0700 (PDT)
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Sun, 06 Apr 2025 02:49:32 +0100
Message-Id: <D8Z6FP3UZG2G.I8H42ZV6DM08@HIDDEN>
From: "Rahul Sandhu" <nvraxn@HIDDEN>
To: <bug-coreutils@HIDDEN>
Subject: coreutils 9.6: regression in handling security.selinux attribute
for ls(1)
X-Mailer: aerc 0.20.1
Received-SPF: pass client-ip=2a00:1450:4864:20::535;
envelope-from=nvraxn@HIDDEN; helo=mail-ed1-x535.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Mon, 07 Apr 2025 00:59:58 -0400
Cc: eggert@HIDDEN
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)
Hey,
coreutils 9.6 appears to have a regression in `ls(1)` for SELinux-aware
builds. `ls -Z` fails to obtain the security context for certain
filesystem objects (e.g. `/sys`). Example to reproduce on Gentoo with
refpolicy:
rsandhu@graphite ~ $ ls -alZ /run/ | grep '?'
drwxr-xr-x 3 root root ? =
60 Apr 5 16:38 credentials
drwxr-xr-x 3 root root ? =
80 Apr 2 16:30 initramfs
drwxr-xr-x 2 root root ? =
40 Apr 2 16:23 modprobe.d
rsandhu@graphite ~ $ getfilecon /run/{credentials,initramfs,modprobe.d}
/run/credentials system_u:object_r:tmpfs_t:s0
/run/initramfs system_u:object_r:tmpfs_t:s0
/run/modprobe.d system_u:object_r:tmpfs_t:s0
Since 432ad8738387f1b2e80e883dc7080df3afabe, coreutils attempts to list
all attributes instead of specifically getting the "security.selinux"
xattr via `getxattr(2)` (which is what libselinux internally calls). As
seen below, the security context xattr only shows when specifically
requesting it by passing the arguments -n 'security.selinux' to the
command line:
rsandhu@graphite ~ $ getfattr -d -m '' /run/credentials
<no output>
rsandhu@graphite ~ $ getfattr -n 'security.selinux' /run/credentials
getfattr: Removing leading '/' from absolute path names
# file: run/credentials
security.selinux=3D"system_u:object_r:tmpfs_t:s0"
Reverting this commit[1], which no longer handles this case, fixes the
regression.
case.
More information is available in the related post on the SELinux mailing
list[2].
Thanks,
Rahul
[1] https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=3D4ce432ad87=
38387f1b2e80e883dc7080df3afabe
[2] https://lore.kernel.org/selinux/CAFqZXNtF8wDyQajPCdGn=3DiOawX4y77ph0Ecf=
cqcUUj+T87FKyA@HIDDEN/
"Rahul Sandhu" <nvraxn@HIDDEN>:bug-coreutils@HIDDEN.
Full text available.bug-coreutils@HIDDEN:bug#77597; Package coreutils.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.