mirrors/libguestfs
1
0
Fork 0
mirror of https://github.com/libguestfs/libguestfs.git synced 2026-03-21 22:53:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

mlcustomize: Fall back to autorelabel if specfile does not exist (RHBZ#1828952).

Browse Source 
https://bugzilla.redhat.com/show_bug.cgi?id=1828952#c2

Cherry picked from libguestfs-common
commit 101dac2eac8c61f0081c343b5d69cfa4efbc2a98 and backported
to libguestfs 1.40 branch (which predates the common submodule).

If SELINUXTYPE is set to some value other than targeted then we look
for a directory /etc/selinux/<SELINUXTYPE> which does not exist.
However this should not cause a fatal error.  Using setfiles to do the
relabelling immediately is a nice-to-have, but we can fallback to
using autorelabel if we're unable to achieve it.
This commit is contained in:
Richard W.M. Jones
2020-05-05 16:44:15 +01:00
parent 3bceb391d1
commit a5e6e764c8
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
customize/SELinux_relabel.ml
View File

@@ -77,6 +77,12 @@ and use_setfiles g =
let specfile =
sprintf "/etc/selinux/%s/contexts/files/file_contexts" policy in
(* If the spec file doesn't exist then fall back to using
* autorelabel (RHBZ#1828952).
*)
if not (g#is_file ~followsymlinks:true specfile) then
failwith "no spec file";
(* RHEL 6.2 - 6.5 had a malformed specfile that contained the
* invalid regular expression "/var/run/spice-vdagentd.\pid"
* (instead of "\.p"). This stops setfiles from working on