[PATCH] --secontext: Implement displaying of expected context upon mismatch

Renaud Métrich rmetrich at redhat.com
Fri Dec 10 13:06:36 UTC 2021


I have some questions regarding using qualify_tokens() for --secontext.

We have --secontext enabled as soon as "type" is present, and using 
"mismatch" only implies "type" as well.

In a nutshell "type" is always there, unless "--secontext=none" is 
specified.

But what would something like below mean?

--secontext=!type

--secontext=!full,mismatch


Finally should I also implement the qualifiers as "-e expr" argument as 
well?

Or should I implement --secontext as a no-arg option and rest as 
qualifiers, as shown below:

--secontext -e secontext=full,mismatch


On 12/10/21 11:08, Dmitry V. Levin wrote:
> On Fri, Dec 10, 2021 at 09:51:24AM +0100, Renaud Métrich wrote:
>> OK I will rework the PR and come back with a new patch. But with
>> christmas this may take some time.
> No problem, some features take time to complete.
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strace.io/pipermail/strace-devel/attachments/20211210/d7999d92/attachment.bin>


More information about the Strace-devel mailing list