Skip to content

Conversation

@pebenito
Copy link
Member

@pebenito pebenito commented Oct 6, 2025

  • SELinux and Xen query arguments are now defined in separate argument groups (selinux and xen), and the tool enforces that arguments from both groups cannot be combined in a single invocation. This ensures users do not mix incompatible queries. (seinfo, seinfoL91-R121)

  • At runtime, the tool checks the loaded policy's platform (SELinux or Xen) and raises errors if queries from the wrong group are specified, preventing platform mismatches. (seinfo, seinfoR146-R153)

  • Each query class now declares a required_platform attribute, specifying whether it is valid for SELinux or Xen policies. This helps prevent accidental misuse and improves code clarity. (setools/fsusequery.py, [1]; setools/genfsconquery.py, [2]; setools/ibpkeyconquery.py, [3]; setools/ibendportconquery.py, [4]; setools/initsidquery.py, [5]; setools/devicetreeconquery.py, [6]; setools/iomemconquery.py, [7]

  • The GitHub Actions workflow is updated to test against Python 3.13 and to use the latest actions/setup-python@v6, ensuring CI compatibility with newer Python versions. (.github/workflows/tests.yml, [1] [2]

@pebenito pebenito force-pushed the seinfo-improvements branch from 8b4a371 to 2ab1a8b Compare October 6, 2025 15:00
Verify that a query's platform matches the provided policy's platform.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
…ies.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Make alphabetical order.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
It simplifies the printing of the range.  Change to hex output where
relevant.

Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
Signed-off-by: Chris PeBenito <chpebeni@linux.microsoft.com>
@pebenito pebenito force-pushed the seinfo-improvements branch from 2ab1a8b to ab9ea42 Compare October 7, 2025 15:05
@pebenito pebenito marked this pull request as ready for review October 7, 2025 15:19
@pebenito pebenito merged commit e51eeae into SELinuxProject:main Oct 7, 2025
10 checks passed
@pebenito pebenito deleted the seinfo-improvements branch October 7, 2025 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant