[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#752002: cdebconf: Please run maintainer scripts in correct selinux context



Package: cdebconf
Version: 0.191
Severity: wishlist

Hi,

Since 1.17.0, dpkg is trying to run the maintainer scripts in a
different context based on the file context and fallback on
"dpkg_script_t".

OTHO, a maintainer script run by dpkg-reconfigure is never transitioned
out of the "dpkg_t" context.

The maintainer scripts run by dpkg-reconfigure should also transition to
the appropriate context.

Since libselinux 2.3, the setexecfilecon() function can be called for
every maintainer scripts just before they are executed.

Cheers,

Laurent Bigonville

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_BE.utf8, LC_CTYPE=fr_BE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


Reply to: