Bug#498438: Wrong SE Linux labels on some files under /var/lib/dpkg when installing conffile

2010-02-07 Thread Guillem Jover
On Sat, 2010-02-06 at 22:22:56 +1100, Russell Coker wrote: On Sat, 6 Feb 2010, Guillem Jover guil...@debian.org wrote: Are the SE Linux file contexts handled like normal file attributes, that get propagated with rename(2) and only get reset on unlink(2) or with an explicit SE Linux call? Or

Bug#498438: Wrong SE Linux labels on some files under /var/lib/dpkg when installing conffile

2010-02-06 Thread Guillem Jover
Hi Russell! [ CCing Manoj as the original author of the dpkg SE Linux support. ] On Tue, 2009-02-17 at 13:32:26 +1100, Russell Coker wrote: If dpkg is not going to abort on an error (not sure when/why this happens) such that ohshit() doesn't abort, then we still have a problem. I

Bug#498438: Wrong SE Linux labels on some files under /var/lib/dpkg when installing conffile

2010-02-06 Thread Russell Coker
On Sat, 6 Feb 2010, Guillem Jover guil...@debian.org wrote: Ok, so this is my basic understanding of how SE Linux works here (my terminology might not be accurate), please correct were appropriate. AFAICS there's at least two ways to apply a context to a file, one is to set the current file

Bug#498438: Wrong SE Linux labels on some files under /var/lib/dpkg when installing conffile

2008-09-09 Thread Russell Coker
Package: dpkg Version: 1.14.20 Severity: normal In src/archive.c the SE Linux context for file creation is set at about line 640. It's set again at about line 795 for reasons I don't understand (this second setting doesn't respect the fact that scontext might have a value of none but this is a