[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [DPKG PATCH] selinux: install log callback to filter messages



Hi!

On Tue, 2022-10-11 at 18:07:00 +0200, Christian Göttsche wrote:
> Since libselinux 3.2, via commit 05bdc03130d7 ("libselinux: use kernel
> status page by default") [1], selinux_status_updated(3) will issue log
> messages on enforcing changes and policy loads.  dpkg is only interested
> in whether the policy changed to then reload the SELinux label database.
> 
> Ignore non-relevant log messages and forward messages of type error,
> warning and avc (which should be treated as error if not audited
> according to selinux_set_callback(3)).

Thanks! I've merged (with a couple of tiny style changes) and pushed,
will be part of the upcoming dpkg 1.21.10 release.

Regards,
Guillem


Reply to: