Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 416307 - www-servers/nginx-1.0.15 should (optionally) RDEPEND on sec-policy/selinux-nginx
Summary: www-servers/nginx-1.0.15 should (optionally) RDEPEND on sec-policy/selinux-nginx
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Jeremy Olexa (darkside) (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-05-16 18:40 UTC by schmitt953
Modified: 2012-05-18 14:01 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
nginx-selinux supporting patch on ebuild (nginx-selinux.patch,880 bytes, patch)
2012-05-16 20:58 UTC, Sven Vermeulen (RETIRED) 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description schmitt953 2012-05-16 18:40:04 UTC 
nginx-1.0.15 does not install selinux policy associated with nginx. It should install that policy if the selinux use flag is selected (the profile usually does this). The user is then required to manually install the selinux policies for nginx. This USE flag should be added to the ebuild and selinux-nginx should install automatically.
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-05-16 19:42:08 UTC 
Have a patch for review?
Comment 2 Sven Vermeulen (RETIRED) gentoo-dev 2012-05-16 20:58:49 UTC 
Created attachment 312059 [details, diff]
nginx-selinux supporting patch on ebuild

Add in dependency on selinux-nginx for nginx ebuild.

Is part of CDEPEND, because we need the dependency in both DEPEND and RDEPEND. The dependency is USE="selinux" triggered (which is only possible for SELinux profiles, others have it forced out).
Comment 3 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-05-17 03:24:53 UTC 
Looks fine, but I'm preparing a 1.3 bump and would prefer to add it there.
Comment 4 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-05-18 14:01:33 UTC 
+*nginx-1.2.0 (18 May 2012)
+
+  18 May 2012; Jeremy Olexa <darkside@gentoo.org> +nginx-1.2.0.ebuild:
+  Version bump from upstream, new stable candidate. bug 414167 with selinux
+  mods from bug 416307