Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #913814

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: tag -1 moreinfo

On Mon, 2018-08-20 at 11:36 +0200, Laurent Bigonville wrote:
> Package: linux-base
> Version: 4.5
> Severity: normal
> File: /usr/bin/linux-update-symlinks
> User: selinux-devel@lists.alioth.debian.org
> Usertags: selinux
> 
> Hi,
> 
> After updating the kernel it seems that the /vmlinuz(.old) and
> /initrd.img(.old) symlinks are deleted and then recreated.
> 
> This means that the SELinux label of these symlinks should be reset.
> 
> The easiest way of doing that is (as there are no perl bindings) to call
> restorecon executable if the executable is installed on the machine as
> it handel the case were selinux is disabled on the machine gracefully
> 
> ie. restorecon /vmlinuz

Why is this needed?  Only boot loaders should be using these symlinks
and they don't know or care about SELinux stuff.

Ben.

-- 
Ben Hutchings
For every action, there is an equal and opposite criticism. - Harrison

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Laurent Bigonville <bigon@debian.org> - 2018-08-20 11:40 +0200
  Bug#906729: Please fix SELinux labels of /vmlinuz symlink after kernel update Ben Hutchings <ben@decadent.org.uk> - 2018-08-21 02:10 +0200

csiph-web