Cleaning up semanage

David Quigley selinux at davequigley.com
Fri Dec 14 16:57:33 UTC 2012


On 12/14/2012 11:48, David Quigley wrote:
> On 12/14/2012 07:10, Daniel J Walsh wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 12/13/2012 06:30 PM, David Quigley wrote:
>>> On 12/13/2012 14:13, David Quigley wrote:
>>>> On 12/13/2012 10:41, Konstantin Ryabitsev wrote:
>>>>> On Wed, Dec 12, 2012 at 10:03 PM, Dave Quigley
>>>>> <selinux at davequigley.com> wrote:
>>>>>> I'm actually going to try to pull together just the parsers 
>>>>>> without
>>>>>> any backend functionality to see how feasible this is and how it
>>>>>> looks. If we like how it looks and its possible we can move 
>>>>>> forward
>>>>>> with it. I think that since --ftype is a longarg that argparse 
>>>>>> might
>>>>>> be able to handle it. If not then some manipulation of things 
>>>>>> might
>>>>>> be in order (like making an = between --ftype and the -d).
>>>>>
>>>>> Note that --ftype can be also written as -f. So, really, if you 
>>>>> want to
>>>>> be fully backwards-compatible, you'll need to correctly parse the
>>>>> following:
>>>>>
>>>>> semanage fcontext -d -f -d /some/dir
>>>>>
>>>>> -- Konstantin Ryabitsev LinuxFoundation.org Montréal, Québec
>>>>
>>>>
>>>> Which brings up a good question. Is there a test suite we can use 
>>>> to
>>>> ensure that the new interface matches the old interface? A 
>>>> regression
>>>> suite for semanage would be very useful in this case. We could 
>>>> start with
>>>> everything failing and rebuild the interface one at a time untill
>>>> everything passes again. -- selinux mailing list
>>>> selinux at lists.fedoraproject.org
>>>> https://admin.fedoraproject.org/mailman/listinfo/selinux
>>>
>>>
>>> I Haven't typed in all of the help info yet but the link is to a 
>>> pastbin
>>> with the usage information for the semanage login subcommand. I 
>>> just need
>>> to get it to react that way when there are 0 arguments passed in as 
>>> well.
>>> Right now it will print this when you type semanage login -h or 
>>> --help. I
>>> want it to print this on semanage login with no arguments as well.
>>>
>>> http://pastebin.com/KTtNk0rC -- selinux mailing list
>>> selinux at lists.fedoraproject.org
>>> https://admin.fedoraproject.org/mailman/listinfo/selinux
>>
>> I love it.  This has been on my long list of cleanups for a while, 
>> but we
>> never seem to get to it.  I looked at this a while ago, and at the 
>> time  the
>> hardest problem I saw was the fact that semanage without arguments 
>> was
>> difficult to do.
>>
>>        Output local customizations
>>        semanage [ -S store ] -o [ output_file | - ]
>>
>>        Input local customizations
>>        semanage [ -S store ] -i [ input_file | - ]
>>
>> argparser does not allow "optional arguments"  like this.
>
> I agree that I'm not sure how possible it is to do that. It might be
> a good idea to change from semanage -i inputfile or semanage -o
> outputfile into semanage backup and semanage restore. Semantically
> those words make sense as a subcommand and makes it clear as to what
> it is actually doing. Its also easy to implement them.
>

Actually maybe import and export would be better.


More information about the selinux mailing list