Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-5172

"syncversion" maybe obsolete for selmodule type in Fedora >= 23

    XMLWordPrintable

Details

    • Bug
    • Status: Accepted
    • Normal
    • Resolution: Unresolved
    • None
    • None
    • selinux_core
    • Fedora F22 packages/Puppet 4.3.1 code running on Fedora 23

    • Platform OS

    Description

      Under CentOS 7, semodule -l (which the selmodule provider uses to check the loaded module version) returns a version number, e.g. (from CentOS 7):

      root@srv-cfgmgt ~
       # semodule -l
      abrt	1.4.1	
      accountsd	1.1.0	
      acct	1.6.0	
      afs	1.9.0	
      aiccu	1.1.0	
      aide	1.7.1	
      ajaxterm	1.0.0	
      alsa	1.12.2	
      

      Under Fedora 23, the output looks like this (e.g. no version specified):

       # semodule -l | head -10
      abrt
      accountsd
      acct
      afs
      aiccu
      aide
      ajaxterm
      alsa
      amanda
      amtu
      

      This causes "syncversion" to always report true when set, and always result in an active resource.

      My policycoreutils level on F23 is policycoreutils-2.4-18.fc23.x86_64

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              mjackson Martin Jackson
              Eric Thompson Eric Thompson
              Votes:
              1 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:

                Zendesk Support