rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Relabel files under /usr/bin to fix stale context after sbin merge

Browse Source 
Related: RHEL-54303
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2024-07-11 13:31:53 +02:00 committed by Petr Lautrbach
parent fc93f2b404
commit 5e1af34521
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
selinux-policy.spec
View File

@ -286,6 +286,10 @@ if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = %1 -a -f ${FILE_CONTEXT}.p
fi; \ fi; \
# rebuilding the rpm database still can sometimes result in an incorrect context \ # rebuilding the rpm database still can sometimes result in an incorrect context \
%{_sbindir}/restorecon -R /usr/lib/sysimage/rpm \ %{_sbindir}/restorecon -R /usr/lib/sysimage/rpm \
# In some scenarios, /usr/bin/httpd is labelled incorrectly after sbin merge. \
# Relabel all files under /usr/bin, in case they got installed before policy \
# was updated and the labels were incorrect. \
%{_sbindir}/restorecon -R /usr/bin \
if %{_sbindir}/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* /etc/*shadow* 2> /dev/null;then \ if %{_sbindir}/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* /etc/*shadow* 2> /dev/null;then \
continue; \ continue; \
fi; fi;