Uploaded image for project: 'Product Technical Learning'
  1. Product Technical Learning
  2. PTL-15347

Lengthy operation without warning and missing output in the GE

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • RH415 - RHEL9.2-en-4-20250130
    • RH415
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • en-US (English)
    • Low

      Please fill in the following information:


      URL: https://rol.redhat.com/rol/app/courses/rh415-9.2/pages/ch08s06
      Reporter RHNID: rhn-adandrea
      Section Title: Guided Exercise: Auditing the SELinux Policy

      Issue description

      • Step 1.7 (sepolicy transition -s init_t -t httpd_t) took at least five minutes before I saw any output. I started thinking perhaps something was wrong with my lab. If that's expected, perhaps the GE should make mention of this?
      • Step 5.2 (sesearch -A -s httpd_t -t http_port_t allow httpd_t http_port_t:tcp_socket name_bind;) does not show any expected output in the GE text, even though output is observed within the lab environment.

      Steps to reproduce:

      Follow the GE as written.

      Here is the sesearch output as observed in the lab environment:

      [root@serverc ~]# sesearch -A -s httpd_t -t http_port_t
      allow httpd_t http_port_t:tcp_socket name_bind;
      allow httpd_t http_port_t:tcp_socket name_bind;
      allow httpd_t http_port_t:tcp_socket name_connect; [ httpd_can_network_relay ]:True
      allow httpd_t http_port_t:tcp_socket name_connect; [ httpd_graceful_shutdown ]:True
      allow httpd_t http_port_t:udp_socket name_bind;
      allow httpd_t port_type:tcp_socket name_connect; [ httpd_can_network_connect ]:True
      allow httpd_t port_type:tcp_socket { recv_msg send_msg };
      allow httpd_t port_type:udp_socket { recv_msg send_msg };
      allow nsswitch_domain port_type:tcp_socket { recv_msg send_msg }; [ nis_enabled ]:True
      allow nsswitch_domain port_type:udp_socket recv_msg; [ nis_enabled ]:True
      allow nsswitch_domain port_type:udp_socket send_msg; [ nis_enabled ]:True
      allow nsswitch_domain reserved_port_type:tcp_socket name_connect; [ nis_enabled ]:True
      -bash: allow: command not found

      Also notice the bash command not found error toward the end. It is as though the output is being passed through to bash, though what's actually happening here is uncertain.

      Workaround:

      None.

      Expected result:

      Advisement of Step 1.7 taking longer than possibly expected, and matching output between the GE and observed responses.

              glsbugs-hybridcloud@redhat.com PTL - RHEL Team
              rhn-gps-adandrea Ashley D’Andrea
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: