blob: 8e2accaf9a18729445087f57a064dd4201a3d2ef (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
SETools version 3.3
Tresys Technology
setools@tresys.com, http://oss.tresys.com/projects/setools
August 15, 2008
CURRENT BUGS AND ISSUES
This file contains a description of the currently aware issues with
SETools. There are undoubtedly more; please report any new problems
to setools-bugs@tresys.com.
SETOOLS
1. There is a critical error in libsepol versions 1.16.2 and 2.0.2
that prevents SETools from opening source policies. The supplied
configure script will detect and abort if it finds this particular
version.
APOL
1. Double clicking on listbox items may not display popup windows in
certain window managers. Instead the user can right-click on the
item in order to display popup windows. This is due to Tk's event
buffer and is not fixable. (Ref: http://tinyurl.com/ltmuh)
2. Apol will correctly load policies with aliases, but the alias names
will be lost (the root type name is used instead). Therefore,
aliases are not displayed and queries should not use them as
parameters.
3. Certain older source policies will not load if complemented type
sets are used outside of neverallow rules. This is due to apol using
a similar parser to checkpolicy, which no longer accepts this use of
the complement operator (~).
SEAUDIT
1. Sorting by date will not work correctly if an audit log spans
through a new calendar year. For example, if the audit log
includes entries from December 2003 and January 2004, when sorted
by date January 2004 will come before the December 2003 entry. This
is because audit logs do not include a year; all messages are
assumed to have occurred on the same year.
2. Audit messages that span multiple lines are not parsed correctly.
This will be addressed in a future revision of SETools.
LIBPOLDIFF-SWIG-JAVA
1. There is currently an issue with SWIG Java bindings that prevents
disowning an object, and there is an issue in libsepol that prevents the
duplication of a policy. Pending the availability of one of these features,
it will not be possible to safely use libpoldiff in Java. Future revisions
to the policy representation are expected to permit the duplication of
policies.
TESTING INFORMATION
Operating Systems:
Fedora Core 5 through 9, for both i386 and x86_64 architectures
SELinux monolithic policy versions:
12, 15 through 18
19 through 23 (both with and without MLS support)
SELinux modular policy versions:
5 through 8
Please report any new bugs or comments to setools-bugs@tresys.com.
Thank you for using SETools!
|
