75f812af59
- fix btrfs mount flags for /usr - degrade message about missing tools for stripping Resolves: rhbz#958519 - set environment vars DRACUT_SYSTEMD, NEWROOT in service file Resolves: rhbz#963159 - don't add volatile swap partitions to host_devs - add libssl.so.10 to make kdump work with fips mode - readd selinux dracut module for kdump - url-lib/url-lib.sh: turn off curl globbing Resolves: rhbz#907497 - include btrfs-zero-log in the initramfs Resolves: rhbz#963257 - proper NAME the network interfaces Resolves: rhbz#965842 - install default font latarcyrheb-sun16 Resolves: rhbz#927564 - optionally install /etc/pcmcia/config.opts Resolves: rhbz#920076 - fix ONBOOT for slaves, set TYPE=Bond for bonding Resolves: rhbz#919001 - add nvme kernel module Resolves: rhbz#910734 - add xfs_metadump - selinux: load_policy script fix - add hid-hyperv and hv-vmbus kernel modules - add parameter rd.live.squashimg Resolves: rhbz#789036 rhbz#782108 - wait for all required interfaces if "rd.neednet=1" Resolves: rhbz#801829 - lvm: add tools for thin provisioning Resolves: rhbz#921235 - ifcfg/write-ifcfg.sh: fixed ifcfg file generation - do not wait for mpath* devices Resolves: rhbz#969068
40 lines
1.4 KiB
Diff
40 lines
1.4 KiB
Diff
From cf8b1b785366e0a7c2ae1b3781d66b0f99d6f8fe Mon Sep 17 00:00:00 2001
|
|
From: "dyoung@redhat.com" <dyoung@redhat.com>
|
|
Date: Thu, 30 May 2013 14:19:00 +0800
|
|
Subject: [PATCH] selinux: load_policy script fix
|
|
|
|
chroot load_policy will use selinuxfs which should be mounted
|
|
in $NEWROOT/sys/fs/selinux for Fedora 19, but because there's
|
|
no $NEWROOT/sys/fs, so later process will fail.
|
|
|
|
Fixing this by bind mount /sys to $NEWROOT/sys.
|
|
|
|
Signed-off-by: Dave Young <dyoung@redhat.com>
|
|
---
|
|
modules.d/98selinux/selinux-loadpolicy.sh | 5 ++++-
|
|
1 file changed, 4 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/modules.d/98selinux/selinux-loadpolicy.sh b/modules.d/98selinux/selinux-loadpolicy.sh
|
|
index 7526265..5dddfc2 100755
|
|
--- a/modules.d/98selinux/selinux-loadpolicy.sh
|
|
+++ b/modules.d/98selinux/selinux-loadpolicy.sh
|
|
@@ -24,7 +24,8 @@ rd_load_policy()
|
|
local ret=0
|
|
local out
|
|
info "Loading SELinux policy"
|
|
- # load_policy does mount /proc and /selinux in
|
|
+ mount -o bind /sys $NEWROOT/sys
|
|
+ # load_policy does mount /proc and /sys/fs/selinux in
|
|
# libselinux,selinux_init_load_policy()
|
|
if [ -x "$NEWROOT/sbin/load_policy" ]; then
|
|
out=$(LANG=C chroot "$NEWROOT" /sbin/load_policy -i 2>&1)
|
|
@@ -35,6 +36,8 @@ rd_load_policy()
|
|
ret=$?
|
|
info $out
|
|
fi
|
|
+ umount $NEWROOT/sys/fs/selinux
|
|
+ umount $NEWROOT/sys
|
|
|
|
if [ "$SELINUX" = "disabled" ]; then
|
|
return 0;
|