Summary: | sys-apps/systemd-tmpfiles: Doesn't build with SELinux support. | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Allen Webb <allenwebb> |
Component: | Current packages | Assignee: | Georgy Yakovlev <gyakovlev> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | allenwebb, floppym |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Attachments: |
Patch that gates selinux support based on USE flag
Patch that gates selinux support based on USE flag |
Description
Allen Webb
2020-11-30 20:25:31 UTC
Created attachment 675970 [details, diff]
Patch that gates selinux support based on USE flag
This probably introduces a dependency on sys-libs/libselinux. Created attachment 675973 [details, diff]
Patch that gates selinux support based on USE flag
This includes a gated DEPEND on sys-libs/libselinux
attached ebuild adds $(usex selinux '' selinux) in systemd_disable_options array, I'd use it below in emesonargs explicitly. it's just logical. I'll fix on merge. what about policy? I doubt it needs full systemd refpolicy, but does not it need at least something? I don't have selinux installations around, so can't really test it. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07c3932854eace4d4970c3845c3213d075097868 commit 07c3932854eace4d4970c3845c3213d075097868 Author: Georgy Yakovlev <gyakovlev@gentoo.org> AuthorDate: 2020-12-02 19:14:51 +0000 Commit: Georgy Yakovlev <gyakovlev@gentoo.org> CommitDate: 2020-12-02 19:19:53 +0000 sys-apps/systemd-tmpfiles: add selinux useflag Bug: https://bugs.gentoo.org/757810 Package-Manager: Portage-3.0.11, Repoman-3.0.2 Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org> sys-apps/systemd-tmpfiles/systemd-tmpfiles-246.ebuild | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) Leaving this bug open till it's verified that this fix is enough. My guess is it's enough for tmpfiles to set selinux attrs on files properly, but not sure if it's enough to run tmpfiles itself =) (In reply to Georgy Yakovlev from comment #4) > attached ebuild adds $(usex selinux '' selinux) in systemd_disable_options > array, I'd use it below in emesonargs explicitly. it's just logical. I'll > fix on merge. > > what about policy? > I doubt it needs full systemd refpolicy, but does not it need at least > something? > > > I don't have selinux installations around, so can't really test it. I am testing on Chrome OS, so the SELinux policy is already present. I had assumed if someone has USE=selinux set there was already an profile provided elsewhere in Gentoo, but maybe I was wrong? Are you talking about a label for /bin/systemd-tmpfiles itself? ok everything seems to be ok now here, closing. |