On Mon, Oct 19 2009, Stephen Smalley wrote:
> On Wed, 2009-10-14 at 00:49 -0500, Manoj Srivastava wrote:
>> On Tue, Oct 13 2009, Joshua Brindle wrote:
>>
>>
>> > Yes, I'm not sure why you'd need libsemanage during early boot, we
>> > probably should apply this:
>> >
>> > diff --git a/libsemanage/src/Makefile b/libsemanage/src/Makefile
>> > index cfb9558..c531a2f 100644
>> > --- a/libsemanage/src/Makefile
>> > +++ b/libsemanage/src/Makefile
>> > @@ -1,7 +1,7 @@
>> > # Installation directories.
>> > PREFIX ?= $(DESTDIR)/usr
>> > LIBDIR ?= $(PREFIX)/lib
>> > -SHLIBDIR ?= $(DESTDIR)/lib
>> > +SHLIBDIR ?= $(PREFIX)/lib
>> > INCLUDEDIR ?= $(PREFIX)/include
>> > PYLIBVER ?= $(shell python -c 'import sys;print "python%d.%d" %
>> > sys.version_info[0:2]')
>> > PYINC ?= /usr/include/${PYLIBVER}
>> >
>>
>> I've applied this patch in Debian unstable.
>
> My only concern with relocating libsemanage is whether it will create
> any compatibility problems for existing binaries previously linked
> against /lib/libsemanage.so.1. Also it could get confusing if you
> build and install the newer version and existing binaries keep using
> the old library at the old location. You likely need/want to symlink
> /lib/libsemanage.so.1 to the new location.
As long as the new library location is in the ld.so path, there
is no issue, is there? At run time, ld.so searches the path, loads the
shared libraries from the new location, prepares the program to run,
and then runs it. At worst, there might be two copies of the library
loaded into memory, in case there are programs already running linked
with libsemanage.
If I am wrong, and long running programs might be affected when
the library location is yanked out from under them, some mitigating
action may be taken. I am not sure there are any daemons yet linked
with libsemanage, but I can arrange for any such daemons to be
restarted during installation, once I get any bug report.
manoj
--
Manoj Srivastava <srivasta@xxxxxxx> <http://www.golden-gryphon.com/>
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
