Bug#333836: [Pkg-sysvinit-devel] Bug#333836: initscripts: mountvirtfs and checkroot.sh have SELinux issues

Erich Schubert erich at debian.org
Fri Oct 14 00:50:39 UTC 2005


Hi,
This is the patch I'm currently testing:
--- standard    2005-10-14 02:47:56.000000000 +0200
+++ /etc/cron.daily/standard    2005-10-14 01:52:34.000000000 +0200
@@ -39,6 +39,8 @@
                                          chmod 600 passwd.bak)
        cmp -s group.bak /etc/group || (cp -p /etc/group group.bak &&
                                        chmod 600 group.bak)
+       if test ! -x /usr/sbin/selinuxenabled || \
+               ! /usr/sbin/selinuxenabled; then
         if [ -f /etc/shadow ] ; then
          cmp -s shadow.bak /etc/shadow || (cp -p /etc/shadow shadow.bak
&&
                                             chmod 600 shadow.bak)
@@ -47,6 +49,7 @@
          cmp -s gshadow.bak /etc/gshadow || (cp -p /etc/gshadow
gshadow.bak &&
                                              chmod 600 gshadow.bak)
        fi
+       fi
 fi

 if cd $bak ; then


It is suboptimal - it will disable the backups on SELinux - but it will
work at least... I'm fairly confident that this doesn't have bad effects
on non-selinux-systems or systems that do have the selinux packages
installed but are currently not in selinux mode...
After all, it's a very simple patch, and it makes the daily errors go
away.

best regards,
Erich Schubert
-- 
    erich@(vitavonni.de|debian.org)    --    GPG Key ID: 4B3A135C    (o_
  A polar bear is a rectangular bear after a coordinate transform.   //\
   Wo befreundete Wege zusammenlaufen, da sieht die ganze Welt für   V_/_
         eine Stunde wie eine Heimat aus. --- Herrmann Hesse





More information about the Pkg-sysvinit-devel mailing list