-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
RH415 - RHEL9.2-en-4-20250130
-
None
-
False
-
-
False
-
-
-
en-US (English)
-
Low
Please fill in the following information:
URL: | https://rol.redhat.com/rol/app/courses/rh415-9.2/pages/ch08s06 |
Reporter RHNID: | rhn-adandrea |
Section Title: | Guided Exercise: Auditing the SELinux Policy |
Issue description
- Step 1.7 (sepolicy transition -s init_t -t httpd_t) took at least five minutes before I saw any output. I started thinking perhaps something was wrong with my lab. If that's expected, perhaps the GE should make mention of this?
- Step 5.2 (sesearch -A -s httpd_t -t http_port_t allow httpd_t http_port_t:tcp_socket name_bind;) does not show any expected output in the GE text, even though output is observed within the lab environment.
Steps to reproduce:
Follow the GE as written.
Here is the sesearch output as observed in the lab environment:
[root@serverc ~]# sesearch -A -s httpd_t -t http_port_t allow httpd_t http_port_t:tcp_socket name_bind; allow httpd_t http_port_t:tcp_socket name_bind; allow httpd_t http_port_t:tcp_socket name_connect; [ httpd_can_network_relay ]:True allow httpd_t http_port_t:tcp_socket name_connect; [ httpd_graceful_shutdown ]:True allow httpd_t http_port_t:udp_socket name_bind; allow httpd_t port_type:tcp_socket name_connect; [ httpd_can_network_connect ]:True allow httpd_t port_type:tcp_socket { recv_msg send_msg }; allow httpd_t port_type:udp_socket { recv_msg send_msg }; allow nsswitch_domain port_type:tcp_socket { recv_msg send_msg }; [ nis_enabled ]:True allow nsswitch_domain port_type:udp_socket recv_msg; [ nis_enabled ]:True allow nsswitch_domain port_type:udp_socket send_msg; [ nis_enabled ]:True allow nsswitch_domain reserved_port_type:tcp_socket name_connect; [ nis_enabled ]:True -bash: allow: command not found
Also notice the bash command not found error toward the end. It is as though the output is being passed through to bash, though what's actually happening here is uncertain.
Workaround:
None.
Expected result:
Advisement of Step 1.7 taking longer than possibly expected, and matching output between the GE and observed responses.