From: Petr Lautrbach <plautrba@redhat.com>
To: SElinux list <selinux@vger.kernel.org>
Cc: Stephen Smalley <stephen.smalley.work@gmail.com>
Subject: Re: [PATCH 4/4] libsemanage: Bump libsemanage.so version
Date: Wed, 30 Sep 2020 17:56:14 +0200 [thread overview]
Message-ID: <20200930155614.GA864960@fedora.redhat.com> (raw)
In-Reply-To: <CAEjxPJ6PHe7DqYh6mLGu+mjMLY43r4tbQzoiXH0=wgSuyVSpcw@mail.gmail.com>
[-- Attachment #1: Type: text/plain, Size: 1834 bytes --]
On Wed, Sep 30, 2020 at 11:22:21AM -0400, Stephen Smalley wrote:
> On Wed, Sep 30, 2020 at 10:51 AM Petr Lautrbach <plautrba@redhat.com> wrote:
> >
> > It's due to the previous ABI incompatible change
> >
> > Signed-off-by: Petr Lautrbach <plautrba@redhat.com>
>
> My only real question is what are the implications for distros for
> this change? Would Fedora end up having to carry both so versions for
> a time? Or can you cleanly switch from the old to the new without
> disruption?
>
Fedora and other distribution will need to temporary ship something like libsepol-compat and
libsemanage-compat with libsepol.so.1 resp libsemanage.so.1 in order not to
break buildroots. Also all packages which require so.1, see bellow, will have to
be rebuilt against so.2
# dnf repoquery --whatrequires libsepol.'so.1()(64bit)'
libselinux-utils-0:3.1-3.fc34.x86_64
libsemanage-0:3.1-2.fc33.x86_64
libsepol-devel-0:3.1-3.fc33.x86_64
parted-0:3.3-6.fc34.x86_64
policycoreutils-0:3.1-4.fc33.x86_64
python3-setools-0:4.3.0-5.fc33.x86_64
secilc-0:3.1-2.fc33.x86_64
# dnf -C repoquery --whatrequires 'libsemanage.so.1()(64bit)'
libsemanage-devel-0:3.1-2.fc33.x86_64
policycoreutils-0:3.1-4.fc33.x86_64
python3-libsemanage-0:3.1-2.fc33.x86_64
shadow-utils-2:4.8.1-4.fc33.x86_64
sssd-common-0:2.3.1-4.fc33.x86_64
sssd-ipa-0:2.3.1-4.fc33.x86_64
I've experienced with this, builds are available in
https://copr.fedorainfracloud.org/coprs/plautrba/selinux-fedora/
E.g. for libsemanage, I've added
+%set_build_flags
+CFLAGS="$CFLAGS -fno-semantic-interposition"
+sed -i 's/LIBVERSION = 2/LIBVERSION = 1/' src/Makefile
+%make_build
+cp src/libsemanage.so.1 ${RPM_BUILD_ROOT}/%{_libdir}/libsemanage.so.1
to the spec file in order to get libsemanage.so.1 which is shipped by
libsemanage.so.1
Petr
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
next prev parent reply other threads:[~2020-09-30 15:56 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-09-30 14:50 [PATCH 1/4] libsepol: Get rid of the old and duplicated symbols Petr Lautrbach
2020-09-30 14:50 ` [PATCH 2/4] libsepol: Bump libsepol.so version Petr Lautrbach
2020-09-30 14:50 ` [PATCH 3/4] libsemanage: Remove legacy and duplicate symbols Petr Lautrbach
2020-09-30 14:50 ` [PATCH 4/4] libsemanage: Bump libsemanage.so version Petr Lautrbach
2020-09-30 15:22 ` Stephen Smalley
2020-09-30 15:56 ` Petr Lautrbach [this message]
2020-10-01 14:18 ` Stephen Smalley
2020-10-01 16:55 ` Petr Lautrbach
2020-10-01 17:08 ` Stephen Smalley
2020-10-01 17:48 ` Petr Lautrbach
2020-10-02 6:53 ` Nicolas Iooss
2020-10-02 14:49 ` Stephen Smalley
2020-10-02 15:41 ` Nicolas Iooss
-- strict thread matches above, loose matches on Subject: below --
2020-10-07 9:50 Petr Lautrbach
2020-10-07 12:35 ` Stephen Smalley
2020-10-08 12:13 ` Dominick Grift
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200930155614.GA864960@fedora.redhat.com \
--to=plautrba@redhat.com \
--cc=selinux@vger.kernel.org \
--cc=stephen.smalley.work@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.