Re: [PATCH 1/2] find: add SELinux support

[Kamil Dudka]

On Sat July 11 2009 18:10:49 James Youngman wrote:
> On Sat, Jul 11, 2009 at 4:58 PM, Kamil Dudka<address@hidden> wrote:
> > Thanks for digging up the SELinux patch!
>
> No problem.   From memory, I think the SELinux kernel support in
> Debian doesn't play nicely with Xen.  That means that if I turn on
> SELinux on the kernel command line on my development machine, it
> crashes.  So it's not that easy for me to to SELinux-related testing.
>  What I'm saying really is that I will apply bugfixes and try to
> resolve issues, but there may well be cases where I just can't
> reproduce problems.

I've conducted some testing on Debian and it behaves a bit weird. I am not 
sure yet, if the find is broken, or my Debian installation itself:

# uname -a
Linux debian 2.6.26-2-amd64 #1 SMP Sun Jun 21 04:47:08 UTC 2009 x86_64 
GNU/Linux

# (cd find && find -maxdepth 1 -printf "%p %Z\n")
. user_u:object_r:user_home_t:s0
./.cvsignore user_u:object_r:user_home_t:s0
./fstype.o unconfined_u:object_r:user_home_t:s0
...

# find find -maxdepth 1 -printf "%p %Z\n"
find user_u:object_r:user_home_t:s0                            
find/.cvsignore user_u:object_r:user_home_t:s0                 
find/fstype.o find: getfilecon: `find/fstype.o': No such file or directory

find/finddata.o find: getfilecon: `find/finddata.o': No such file or directory

...

As time permits I will keep on trying to zero in this.

Kamil