[Pkg-sysvinit-devel] Bug#626725: Bug#626720: SELinux refpolicy, initscripts and /run

[Roger Leigh]

On Thu, Jun 09, 2011 at 09:32:44AM +1000, Russell Coker wrote:
> Sorry for the delay. Yes please make it break the old version of policy. I hope to upload a fix on Sunday.

That would be super, thanks.  I'm planning to upload initscripts
with this patch.  Is this Breaks: version OK with you?


Thanks,
Roger


Index: debian/control
===================================================================
--- debian/control	(revision 1964)
+++ debian/control	(working copy)
@@ -55,6 +55,7 @@
 Recommends: psmisc, e2fsprogs
 Conflicts: libdevmapper1.02.1 (<< 2:1.02.24-1)
 Replaces: libc6, libc6.1, libc0.1, libc0.3
+Breaks: selinux-policy-default (<< 2:0.2.20100524-9)
 Description: scripts for initializing and shutting down the system
  The scripts in this package initialize a standard Debian
  system at boot time and shut it down at halt or reboot time.
Index: debian/src/initscripts/etc/init.d/mountkernfs.sh
===================================================================
--- debian/src/initscripts/etc/init.d/mountkernfs.sh	(revision 1964)
+++ debian/src/initscripts/etc/init.d/mountkernfs.sh	(working copy)
@@ -40,6 +40,7 @@
 	fi
 	# TODO: Add -onodev once checkroot no longer creates a device node.
 	domount "$MNTMODE" tmpfs shmfs /run tmpfs "-onosuid$RUNEXEC$RUN_OPT"
+	[ -x /sbin/restorecon ] && /sbin/restorecon -r /run
 	[ -f /run/.ramfs ] || touch /run/.ramfs
 
 	# Make lock directory as the replacement for /var/lock
Index: debian/changelog
===================================================================
--- debian/changelog	(revision 1964)
+++ debian/changelog	(working copy)
@@ -1,3 +1,13 @@
+sysvinit (2.88dsf-13.8) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * initscripts Breaks all selinux-policy-default versions up to and
+    including 2:0.2.20100524-9, which do not support /run.
+  * Add restorecon support for selinux to /run in mountkernfs.
+    (Closes: #628107).  Thanks to Martin Orr for this patch.
+
+ -- Roger Leigh <rleigh at debian.org>  Thu, 09 Jun 2011 11:14:59 +0100
+
 sysvinit (2.88dsf-13.7) unstable; urgency=low
 
   [ Roger Leigh ]

-- 
  .''`.  Roger Leigh
 : :' :  Debian GNU/Linux             http://people.debian.org/~rleigh/
 `. `'   Printing on GNU/Linux?       http://gutenprint.sourceforge.net/
   `-    GPG Public Key: 0x25BFB848   Please GPG sign your mail.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-sysvinit-devel/attachments/20110609/081991d5/attachment.pgp>