Knowing policy contents

[Dominick Grift]

On Mon, 2014-02-24 at 10:49 +0100, Maciej Lasyk wrote:

> I already tried with semodule_unpackage (found about it here:
> http://serverfault.com/questions/321301/how-do-i-view-the-contents-of-a-selinux-policy-package
> ) but unfortunately every time I try to unpack *any* module from
> targeted active modules I get:
> 
> root:modules/ # semodule_unpackage lvm.pp lvm.mod
> libsepol.module_package_read_offsets: wrong magic number for module
> package:  expected 0xf97cff8f, got 0x39685a42
> semodule_unpackage:  Error while reading policy module from lvm.pp
> 
> Stracing this semodule_unpackage gave me nothing, so I stucked here.

I haven't really tried it myself, but i've been told that, i think,
bunzip2 or something like that is able to extract .pp archives.

So if there is some incompatibility between your semodule_unpackage and
the archive, you may want to try to extract it using a tool like
bunzip2.