Cannot create SPEC file with sepolicy-generate

AlanG

4/19/24, 11:07 AM

In EL7 I have been creating custom policy with sepolicy-generate and one of the artefacts created is a SPEC file. When I run the same command on EL8 I don't get the SPEC file. According to the manpage on EL8 it should still be creating the SPEC file.

Is there some dependency that must be installed to enable this feature? Or what am I missing?

On EL7

$ sepolicy generate --init -n foo /usr/sbin/foo
Loaded plugins: fastestmirror, product-id, subscription-manager

***************************************
Warning /usr/sbin/foo does not exist
***************************************

Created the following files:
/home/agriffit/audit2/foo.te # Type Enforcement file
/home/agriffit/audit2/foo.if # Interface file
/home/agriffit/audit2/foo.fc # File Contexts file
/home/agriffit/audit2/foo_selinux.spec # Spec file
/home/agriffit/audit2/foo.sh # Setup Script

On EL8

$ sepolicy generate --init -n foo /usr/sbin/foo

***************************************
Warning /usr/sbin/foo does not exist
***************************************

Created the following files:
/home/agriffit/test/foo.te # Type Enforcement file
/home/agriffit/test/foo.if # Interface file
/home/agriffit/test/foo.fc # File Contexts file
/home/agriffit/test/foo.sh # Setup Script

0 + 2

selinux

AlanG

4/19/24, 1:46 PM

Same command works in EL9. Starting to think it's an EL8 bug.

asktyagi

5/10/24, 3:19 PM

Can you share which EL8 version have you tested above, add `uname -a` result?

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Cannot create SPEC file with sepolicy-generate

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.