Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #61875

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update

Path csiph.com!news.redatomik.org!aioe.org!bofh.it!news.nic.it!robomod
From Ben Hutchings <ben@decadent.org.uk>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update
Date Tue, 21 Aug 2018 02:10:02 +0200
Message-ID <wp2pb-4cN-3@gated-at.bofh.it> (permalink)
References <woOPg-4vN-11@gated-at.bofh.it> <woOPg-4vN-11@gated-at.bofh.it>
X-Original-To Laurent Bigonville <bigon@debian.org>, 906729@bugs.debian.org
X-Mailbox-Line From debian-bugs-dist-request@lists.debian.org Tue Aug 21 00:03:13 2018
Old-Return-Path <debbugs@buxtehude.debian.org>
X-Spam-Flag NO
X-Spam-Score -2.299
Reply-To Ben Hutchings <ben@decadent.org.uk>, 906729@bugs.debian.org
Resent-To debian-bugs-dist@lists.debian.org
Resent-Cc Debian Kernel Team <debian-kernel@lists.debian.org>
X-Debian-Pr-Message followup 906729
X-Debian-Pr-Package linux-base
X-Debian-Pr-Source linux-2.6, linux-base
X-Spam-Bayes score:0.0000 Tokens: new, 14; hammy, 150; neutral, 61; spammy, 0. spammytokens: hammytokens:0.000-+--H*c:pgp-sha512, 0.000-+--H*F:D*decadent.org.uk, 0.000-+--H*RU:sk:shadbol, 0.000-+--H*r:sk:shadbol, 0.000-+--HX-SA-Exim-Scanned:sk:shadbol
Content-Type multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-m+2WqNt5Z8LmVd2mbBAD"
X-Mailer Evolution 3.28.5-1
MIME-Version 1.0
X-Sa-Exim-Connect-IP 2a02:8011:400e:2:cbab:f00:c93f:614
X-Sa-Exim-Mail-From ben@decadent.org.uk
X-Sa-Exim-Scanned No (on shadbolt.decadent.org.uk); SAEximRunCond expanded to false
X-Debian-Message from BTS
X-Mailing-List <debian-bugs-dist@lists.debian.org> archive/latest/1480359
List-ID <debian-bugs-dist.lists.debian.org>
List-URL <https://lists.debian.org/debian-bugs-dist/>
Approved robomod@news.nic.it
Lines 61
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Tue, 21 Aug 2018 00:59:43 +0100
X-Original-Message-ID <01084b82ba6f2c0dae31041a9c5db0ec9ff3769d.camel@decadent.org.uk>
X-Original-References <153475781975.8041.4969759210085056376.reportbug@valinor.bigon.be> <153475781975.8041.4969759210085056376.reportbug@valinor.bigon.be>
Xref csiph.com linux.debian.bugs.dist:913814 linux.debian.kernel:61875

Cross-posted to 2 groups.

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 moreinfo

On Mon, 2018-08-20 at 11:36 +0200, Laurent Bigonville wrote:
> Package: linux-base
> Version: 4.5
> Severity: normal
> File: /usr/bin/linux-update-symlinks
> User: selinux-devel@lists.alioth.debian.org
> Usertags: selinux
> 
> Hi,
> 
> After updating the kernel it seems that the /vmlinuz(.old) and
> /initrd.img(.old) symlinks are deleted and then recreated.
> 
> This means that the SELinux label of these symlinks should be reset.
> 
> The easiest way of doing that is (as there are no perl bindings) to call
> restorecon executable if the executable is installed on the machine as
> it handel the case were selinux is disabled on the machine gracefully
> 
> ie. restorecon /vmlinuz

Why is this needed?  Only boot loaders should be using these symlinks
and they don't know or care about SELinux stuff.

Ben.

-- 
Ben Hutchings
For every action, there is an equal and opposite criticism. - Harrison


Back to linux.debian.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Laurent Bigonville <bigon@debian.org> - 2018-08-20 11:40 +0200
  Processed: Re: Bug#906729: Please fix SELinux labels of /vmlinuz  symlink after kernel update "Debian Bug Tracking System" <owner@bugs.debian.org> - 2018-08-21 02:10 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Ben Hutchings <ben@decadent.org.uk> - 2018-08-21 02:10 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Christian Göttsche <cgzones@googlemail.com> - 2020-01-25 19:50 +0100
    Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update bauen1 <j2468h@googlemail.com> - 2020-12-05 13:50 +0100

csiph-web