Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #61865

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update

Cross-posted to 2 groups.

Show all headers | View raw

Package: linux-base
Version: 4.5
Severity: normal
File: /usr/bin/linux-update-symlinks
User: selinux-devel@lists.alioth.debian.org
Usertags: selinux

Hi,

After updating the kernel it seems that the /vmlinuz(.old) and
/initrd.img(.old) symlinks are deleted and then recreated.

This means that the SELinux label of these symlinks should be reset.

The easiest way of doing that is (as there are no perl bindings) to call
restorecon executable if the executable is installed on the machine as
it handel the case were selinux is disabled on the machine gracefully

ie. restorecon /vmlinuz

Kind regards,

Laurent Bigonville

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.17.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy

Versions of packages linux-base depends on:
ii  debconf [debconf-2.0]  1.5.69

linux-base recommends no packages.

linux-base suggests no packages.

-- debconf information:
  linux-base/removing-title:
  linux-base/removing-running-kernel: true

Back to linux.debian.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Laurent Bigonville <bigon@debian.org> - 2018-08-20 11:40 +0200
  Processed: Re: Bug#906729: Please fix SELinux labels of /vmlinuz  symlink after kernel update "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-08-21 02:10 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Ben Hutchings <ben@decadent.org.uk> - 2018-08-21 02:10 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Christian Göttsche <cgzones@googlemail.com> - 2020-01-25 19:50 +0100
    Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update bauen1 <j2468h@googlemail.com> - 2020-12-05 13:50 +0100

csiph-web