Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #61875

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update

From Ben Hutchings <ben@decadent.org.uk>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update
Date 2018-08-21 02:10 +0200
Message-ID <wp2pb-4cN-3@gated-at.bofh.it> (permalink)
References <woOPg-4vN-11@gated-at.bofh.it> <woOPg-4vN-11@gated-at.bofh.it>
Organization linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 moreinfo

On Mon, 2018-08-20 at 11:36 +0200, Laurent Bigonville wrote:
> Package: linux-base
> Version: 4.5
> Severity: normal
> File: /usr/bin/linux-update-symlinks
> User: selinux-devel@lists.alioth.debian.org
> Usertags: selinux
> 
> Hi,
> 
> After updating the kernel it seems that the /vmlinuz(.old) and
> /initrd.img(.old) symlinks are deleted and then recreated.
> 
> This means that the SELinux label of these symlinks should be reset.
> 
> The easiest way of doing that is (as there are no perl bindings) to call
> restorecon executable if the executable is installed on the machine as
> it handel the case were selinux is disabled on the machine gracefully
> 
> ie. restorecon /vmlinuz

Why is this needed?  Only boot loaders should be using these symlinks
and they don't know or care about SELinux stuff.

Ben.

-- 
Ben Hutchings
For every action, there is an equal and opposite criticism. - Harrison


Back to linux.debian.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Laurent Bigonville <bigon@debian.org> - 2018-08-20 11:40 +0200
  Processed: Re: Bug#906729: Please fix SELinux labels of /vmlinuz  symlink after kernel update "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-08-21 02:10 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Ben Hutchings <ben@decadent.org.uk> - 2018-08-21 02:10 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Christian Göttsche <cgzones@googlemail.com> - 2020-01-25 19:50 +0100
    Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update bauen1 <j2468h@googlemail.com> - 2020-12-05 13:50 +0100

csiph-web