search

containers / udica

This repository contains a tool for generating SELinux security profiles for containers
GNU General Public License v3.0
488 stars 47 forks source link

Couldn't create policy: 'source' #33

Closed s4s0l closed 5 years ago

s4s0l commented 5 years ago

Describe the bug Unable to generate policy.

# podman inspect 8e | udica -j -  my_container
Couldn't create policy: 'source'

To Reproduce Steps to reproduce the behavior:

  1. Fresh fedora 30 aws instance
  2. Follow installation instructions in README.md

Expected behavior Policy generated

wrabcak commented 5 years ago

Hi @s4s0l ,

Could you please attahc output of: # rpm -q udica

and what kind of container are you running?

Thanks, Lukas.

wrabcak commented 5 years ago

Hi @rhatdan, Did containers team changed the structure of json file in container inspection? It looks so..

s4s0l commented 5 years ago 
rpm -q udica
package udica is not installed

... as i said I'm following steps from README.md in this repo. Installation instructions are to get udica from git. My version is from commit 9eec5d82ec4b1be3a63822394235cf1abe2c88b3.

podman version
Version:            1.4.5-dev
RemoteAPI Version:  1
Go Version:         go1.12.6
OS/Arch:            linux/amd64

attachment contains container inspection result. file.txt.

Let me know if u need anything more.

wrabcak commented 5 years ago

Hi @s4s0l ,

Could you please try udica from this repository? https://github.com/wrabcak/udica/tree/fb-new-podman

Thanks, Lukas.

s4s0l commented 5 years ago

It wokrs.

wrabcak commented 5 years ago

Thanks for testing!

rhatdan commented 5 years ago

@wrabcak Not conciously...

AkihiroSuda commented 5 years ago

seems not fixed: https://github.com/containers/udica/issues/43