libselinux.so.1 and some utils shouldn't be in /usr

libselinux.so.1 and some utils shouldn't be in /usr

[Bastian Blank]

hi folks

libselinux.so.1 and some of the utils shouldn't be in /usr.
this applies to anything which is needed to restore a broken system
because /usr may on an extra partition.

bastian

-- 
Men will always be men -- no matter where they are.
		-- Harry Mudd, "Mudd's Women", stardate 1329.8

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Russell Coker]

On Sat, 18 Oct 2003 21:34, Bastian Blank wrote:
> libselinux.so.1 and some of the utils shouldn't be in /usr.
> this applies to anything which is needed to restore a broken system
> because /usr may on an extra partition.

This has already been discussed and a patch has already been posted to the 
list.  I expect that the next release will have this fixed.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Bastian Blank]

On Sun, Oct 19, 2003 at 12:35:06AM +1000, Russell Coker wrote:
> This has already been discussed and a patch has already been posted to the 
> list.  I expect that the next release will have this fixed.

do you have any pointer to the patch?

bastian

-- 
Only a fool fights in a burning house.
		-- Kank the Klingon, "Day of the Dove", stardate unknown

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Russell Coker]

On Sun, 19 Oct 2003 22:10, Bastian Blank wrote:
> On Sun, Oct 19, 2003 at 12:35:06AM +1000, Russell Coker wrote:
> > This has already been discussed and a patch has already been posted to
> > the list.  I expect that the next release will have this fixed.
>
> do you have any pointer to the patch?

Here is the message with the patch:
http://marc.theaimsgroup.com/?l=selinux&m=106557438826674&w=2

Here are the list archives:
http://marc.theaimsgroup.com/?l=selinux&r=1&w=2

See my .sig for other SE Linux links and information.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Bastian Blank]

On Sun, Oct 19, 2003 at 11:01:20PM +1000, Russell Coker wrote:
> Here is the message with the patch:
> http://marc.theaimsgroup.com/?l=selinux&m=106557438826674&w=2

okay, i see it. but it seems to violate the fhs by put the libselinux.so
symlink into /lib as well, it is not essential for running applications.

bastian

-- 
Without freedom of choice there is no creativity.
		-- Kirk, "The return of the Archons", stardate 3157.4

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Tom]

On Sun, Oct 19, 2003 at 06:35:01PM +0200, Bastian Blank wrote:
> okay, i see it. but it seems to violate the fhs by put the libselinux.so
> symlink into /lib as well, it is not essential for running applications.

It is. For all apps that reside in /bin or /sbin and could potentially
be executed before /usr is mounted.


-- 
http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Stephen Smalley]

On Sun, 2003-10-19 at 09:01, Russell Coker wrote:
> On Sun, 19 Oct 2003 22:10, Bastian Blank wrote:
> > On Sun, Oct 19, 2003 at 12:35:06AM +1000, Russell Coker wrote:
> > > This has already been discussed and a patch has already been posted to
> > > the list.  I expect that the next release will have this fixed.
> >
> > do you have any pointer to the patch?
> 
> Here is the message with the patch:
> http://marc.theaimsgroup.com/?l=selinux&m=106557438826674&w=2

That patch wasn't merged, as it causes the static library to also be
installed to /lib.  Instead, a patch by Dan Walsh (available from his
SRPM, under ftp://people.redhat.com/dwalsh/SELinux/srpms) was merged to
only install libselinux.so to /lib, and his spec file was
correspondingly adjusted.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Thorsten Kukuk]

On Mon, Oct 20, Tom wrote:

> On Sun, Oct 19, 2003 at 06:35:01PM +0200, Bastian Blank wrote:
> > okay, i see it. but it seems to violate the fhs by put the libselinux.so
> > symlink into /lib as well, it is not essential for running applications.
> 
> It is. For all apps that reside in /bin or /sbin and could potentially
> be executed before /usr is mounted.

Tom, don't be confused with the real library and the .so symlink.

The real library should be in /lib
The .so link, which is only used for linking applications against
this library and never for runtime, should reside in /usr/lib.

  Thorsten

-- 
Thorsten Kukuk       http://www.suse.de/~kukuk/        kukuk@suse.de
SuSE Linux AG        Deutschherrnstr. 15-19        D-90429 Nuernberg
--------------------------------------------------------------------    
Key fingerprint = A368 676B 5E1B 3E46 CFCE  2D97 F8FD 4E23 56C6 FB4B

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Stephen Smalley]

On Mon, 2003-10-20 at 11:37, Thorsten Kukuk wrote:
> Tom, don't be confused with the real library and the .so symlink.
> 
> The real library should be in /lib
> The .so link, which is only used for linking applications against
> this library and never for runtime, should reside in /usr/lib.

Ok, we'll have to fix this in the Makefile, as the current patch from
Dan Walsh causes both the real shared library and the .so link to be
created in /lib, with the static library in /usr/lib.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Bastian Blank]

On Mon, Oct 20, 2003 at 09:01:51AM -0400, Stephen Smalley wrote:
>                     Instead, a patch by Dan Walsh (available from his
> SRPM, under ftp://people.redhat.com/dwalsh/SELinux/srpms) was merged to
> only install libselinux.so to /lib, and his spec file was
> correspondingly adjusted.

hmm, is it possible to merge such things in the public cvs?

bastian

-- 
Suffocating together ... would create heroic camaraderie.
		-- Khan Noonian Singh, "Space Seed", stardate 3142.8

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: libselinux.so.1 and some utils shouldn't be in /usr

[Stephen Smalley]

On Mon, 2003-10-20 at 13:49, Bastian Blank wrote:
> hmm, is it possible to merge such things in the public cvs?

Done, but it will take a bit to synchronize the read-only mirrors.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.