Re: Make patch SELinux compatible

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On May 20, 2010, at 8:24 AM, Stephen Smalley wrote:

> On Thu, 2010-05-20 at 08:22 -0400, Vadym Chepkov wrote:
>> On May 20, 2010, at 8:12 AM, yersinia wrote:
>> 
>>> On Thu, May 20, 2010 at 1:15 PM, Vadym Chepkov <vchepkov@xxxxxxxxx> wrote:
>>>> Hi,
>>>> 
>>>> Is there a way to make patch in Redhat SELinux compatible?
>>>> 
>>>> # ls -Z php.php
>>>> -rw-r--r--  root root user_u:object_r:httpd_sys_content_t:s0 php.php
>>>> 
>>>> # patch -p1 < /root/php.patch
>>>> patching file php.php
>>>> 
>>>> # ls -Z php.php
>>>> -rw-r--r--  root root user_u:object_r:tmp_t:s0         php.php
>>> Strange. For me  this work as aspected, because patch first unlink php.php and
>>> after read /tmp/pxxxx and write php.php. Are you sure that the file
>>> context for your php.php was persistent (via semanage fscontext ) and
>>> not set via chcon ?
>> 
>> yes, I am sure.
>> and I never user 'semanage fcontext', I prefer local.fc
>> But in this case it's under /var/www, so it inherits default context.
>> 
>> rpm -qlp patch-2.5.4-29.2.3.el5.src.rpm 
>> patch-2.5-stderr.patch
>> patch-2.5.4-ifdef.patch
>> patch-2.5.4-program_name.patch
>> patch-2.5.4-sigsegv.patch
>> patch-2.5.4-suffix.patch
>> patch-2.5.4.tar.gz
>> patch-parse.patch
>> patch-posix-backup.patch
>> patch-stripcr.patch
>> patch.spec
>> 
>> no selinux :(
> 
> Hmmm...I ran the test case in that bug though and it still fails on
> F-12.  Even with a -selinux patch in the .src.rpm.  

Concur, I just compiled patch-2.6.1-2 on el5, patch-selinux.patch included, same result.

Vadym



--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux