Re: Developers of packages please pay attention to selinux labeling.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 07/13/2010 10:37 AM, Till Maas wrote:
> On Tue, Jul 13, 2010 at 08:55:47AM -0400, Daniel J Walsh wrote:
>> If you are changing the locate of an executable or libraries the
>> executables write to, please make sure SELinux labels are still
>> consistant or contact the selinux developers for help.  IF you update a
>> package in a released version of Fedora and change the locations you
>> MUST make sure it still works with selinux in enforcing mode.
> 
> I do not understand the "the executables write to" part of the condition
> of what is bad and therefore not at all what needs to be avoided.
> 
> Is it possible to move a library from /usr/lib to /lib without breaking
> selinux?
> 
> Regards
> Till
> 
Usually yes.

matchpathcon /usr/lib/mylib.so
matchpathcon /lib/mylib.so

If they are the same no problem, if they are different talk to us.
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux