[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#501652: live-helper: lh_build fails if host has selinux enabled (even in permissive mode)



Package: live-helper
Version: 1.0.1-1
Severity: normal
Tags: patch

lh_build fails if selinux is enabled on the host filesystem,
even in permissive mode.

This happens when some packages are trying to add or update user
informations, with the following error:
Unpacking mysql-server-5.0 (from .../mysql-server-5.0_5.0.51a-15_i386.deb) ... 
chage: Permission denied.

The solution is to mount selinux during lh_build
For ex., I modified lh_chroot_sysfs to add:
mkdir -p chroot/selinux
${LH_ROOT_COMMAND} mount none -t selinuxfs chroot/selinux

and lh_clean
${LH_ROOT_COMMAND} umount -f chroot/selinux > /dev/null 2>&1 || true

I also changed lh_binary_chroot:
if [ -f chroot/selinux/policyvers ]
then
        if [ "${LH_USE_FAKEROOT}" != "enabled" ]
        then
                ${LH_ROOT_COMMAND} umount chroot/selinux
        else
                rm -rf chroot/selinux
                mkdir -p chroot/selinux
        fi
fi


As I am not really satisfied of the patches (especially modifying
lh_chroot_sysfs .. maybe we should add lh_chroot_selinuxfs), I am not
attaching them, but if you want I can create a patch.

Regards,
Pierre

-- Package-specific info:

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages live-helper depends on:
ii  debootstrap                   1.0.10     Bootstrap a basic Debian system
ii  gettext-base                  0.17-4     GNU Internationalization utilities

live-helper recommends no packages.

Versions of packages live-helper suggests:
ii  dosfstools       3.0.0-1                 utilities for making and checking 
ii  fakeroot         1.10.1                  Gives a fake root environment
ii  genext2fs        1.4.1-2.1               ext2 filesystem generator for embe
ii  genisoimage      9:1.1.8-1               Creates ISO-9660 CD-ROM filesystem
ii  grub             0.97-47                 GRand Unified Bootloader (Legacy v
ii  memtest86+       2.01-1.1                thorough real-mode memory tester
ii  mtools           3.9.11-1                Tools for manipulating MSDOS files
ii  parted           1.8.8.git.2008.03.24-10 The GNU Parted disk partition resi
ii  squashfs-tools   1:3.3-7                 Tool to create and append to squas
ii  sudo             1.6.9p17-1              Provide limited super user privile
ii  uuid-runtime     1.41.2-1                universally unique id library
ii  win32-loader     0.6.8                   Debian-Installer loader for win32

-- no debconf information



Reply to: