[Pkg-sysvinit-devel] Bug#333836: initscripts: mountvirtfs and checkroot.sh have SELinux issues

Erich Schubert erich at debian.org
Thu Oct 13 22:45:26 UTC 2005


Package: initscripts
Version: 2.86.ds1-4
Severity: normal
Tags: patch

Hi,
Both mountvirtfs and checkroot.sh try to "touch" filesystem root nodes
to verify that they are writeable.
On SELinux systems, this is currently not allowed by policy, and it's
not desireable to allow this. Please add a check that tests for SELinux
and just assumes the filesystems are writeable on SElinux?

Example code snipped for dir_writeable():

if test -x /usr/sbin/selinuxenabled && /usr/sbin/selinuxenabled; then
	return 0
fi

Of course it would be nicer to have a working is_writeable test...

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.13-rc4
Locale: LANG=de_DE.UTF-8 at euro, LC_CTYPE=de_DE.UTF-8 at euro (charmap=UTF-8)

Versions of packages initscripts depends on:
hi  coreutils                    5.2.1-2.1   The GNU core utilities
ii  dpkg                         1.13.11.0.1 package maintenance system for Deb
ii  e2fsprogs                    1.38-2      ext2 file system utilities and lib
ii  libc6                        2.3.5-6     GNU C Library: Shared libraries an
ii  lsb-base                     3.0-9       Linux Standard Base 3.0 init scrip
ii  util-linux                   2.12p-8     Miscellaneous system utilities

initscripts recommends no packages.

-- no debconf information




More information about the Pkg-sysvinit-devel mailing list