[DSE-Dev] Bug#796693: Bug#796693: selinux-basics: Has init script in runlevel S but no matching service file

Laurent Bigonville bigon at debian.org
Mon Sep 14 17:23:33 UTC 2015


Le 14/09/15 17:26, Russell Coker a écrit :
> On Tue, 15 Sep 2015 12:49:15 AM Laurent Bigonville wrote:
>> Package: selinux-basics
>> Followup-For: Bug #796693
>>
>> I'm planning to kill the selinux-basics LSB initscript entirely and
>> remove all functionalities from the selinux-basic package. I'm planning
>> to keep selinux-basics as just a metapackage (with maybe the scripts to
>> easily enable selinux on debian).
>>
>> I'll move the relabeling functions to the policycoreutils package and use
>> the same logic that fedora is using (debian-selinux-autorelabel.service
>> and debian-selinux-autorelabel-mark.service plus a
>> debian-selinux-autorelabel LSB initscript).
> Why are you planning to merge it with policycoreutils?  Is the functionality
> in question in policycoreutils upstream?  I don't have any real objection to
> such changes, but I would like to know what the benefits are.

The restorecon/fixfiles executable is in that package anyway and 
policycoreutils package is somewhat central for selinux to work, so I 
feel this is a better place for the relabeling bits.

> If there's code we can copy from Fedora then that's great!

Yeah I also think it's interesting to limit the differences between distro

> As an aside I uploaded a new version of selinux-basics ~6 hours ago to fix the
> umount issue.  For some reason my uploads seem to be taking ages to get
> processed.
There are currently some issues on the debian infrastructure I think



More information about the SELinux-devel mailing list