402605 – www-servers/lighttpd add selinux use depency on sec-policy/selinux-apache

Bug 402605 - www-servers/lighttpd add selinux use depency on sec-policy/selinux-apache

Summary: www-servers/lighttpd add selinux use depency on sec-policy/selinux-apache

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Hardened (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Sven Vermeulen (RETIRED)

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2012-02-07 21:26 UTC by Florian Steinel
Modified:	2012-02-08 20:32 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Florian Steinel 2012-02-07 21:26:56 UTC

www-servers/lighttpd needs sec-policy/selinux-apache for correct security labels.
ls -laZ /usr/sbin/lighttpd
-rwxr-xr-x. 1 root root system_u:object_r:httpd_exec_t 216472 Jan  7 22:30 /usr/sbin/lighttpd

--- lighttpd-1.4.30-r1.ebuild.orig       2012-01-17 23:32:05.000000000 +0100
+++ lighttpd-1.4.30-r1.ebuild   2012-02-07 22:25:34.130002905 +0100
@@ -36,6 +36,7 @@ RDEPEND="
                sys-fs/e2fsprogs
        )
        xattr? ( kernel_linux? ( sys-apps/attr ) )
+       selinux? ( sec-policy/selinux-bind )
        zlib? ( >=sys-libs/zlib-1.1 )"

 DEPEND="${RDEPEND}

Reproducible: Always

Comment 1 Sven Vermeulen (RETIRED) gentoo-dev

2012-02-08 20:32:47 UTC

Thanks, fixed for lighttpd-1.4.30-r1 (latest ~arch), this'll bubble down further later. no revbump as existing installations have no need for rebuilds (and selinux usage community is fairly small).