Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 416307

Summary: www-servers/nginx-1.0.15 should (optionally) RDEPEND on sec-policy/selinux-nginx
Product: Gentoo Linux Reporter: schmitt953
Component: New packagesAssignee: Jeremy Olexa (darkside) (RETIRED) <darkside>
Status: RESOLVED FIXED    
Severity: normal CC: dev-zero, hollow, swift
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: nginx-selinux supporting patch on ebuild

Description schmitt953 2012-05-16 18:40:04 UTC
nginx-1.0.15 does not install selinux policy associated with nginx. It should install that policy if the selinux use flag is selected (the profile usually does this). The user is then required to manually install the selinux policies for nginx. This USE flag should be added to the ebuild and selinux-nginx should install automatically.
Comment 1 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-05-16 19:42:08 UTC
Have a patch for review?
Comment 2 Sven Vermeulen (RETIRED) gentoo-dev 2012-05-16 20:58:49 UTC
Created attachment 312059 [details, diff]
nginx-selinux supporting patch on ebuild

Add in dependency on selinux-nginx for nginx ebuild.

Is part of CDEPEND, because we need the dependency in both DEPEND and RDEPEND. The dependency is USE="selinux" triggered (which is only possible for SELinux profiles, others have it forced out).
Comment 3 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-05-17 03:24:53 UTC
Looks fine, but I'm preparing a 1.3 bump and would prefer to add it there.
Comment 4 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2012-05-18 14:01:33 UTC
+*nginx-1.2.0 (18 May 2012)
+
+  18 May 2012; Jeremy Olexa <darkside@gentoo.org> +nginx-1.2.0.ebuild:
+  Version bump from upstream, new stable candidate. bug 414167 with selinux
+  mods from bug 416307