[PATCH] --secontext: Implement displaying of expected context upon mismatch
Dmitry V. Levin
ldv at altlinux.org
Tue Dec 7 06:58:32 UTC 2021
On Tue, Dec 07, 2021 at 07:35:25AM +0100, Renaud Métrich wrote:
> Well anything can be chosen, there is no getfilecon/getpidcon
> functionality here: SELinux has no idea what is really expected, it's a
> comparison to its database (which isn't used by the kernel and the
> kernel is not aware of).
> So I chose to display a "!!" for now:
> "myfile" [foobar_t!!expected_context_t]
I guess you've chosen "!!" because you don't expect a valid context type
containing "!!" like "foobar_t!!expected_context_t".
More information about the Strace-devel