Gentoo Archives: gentoo-dev

From: Luis Ressel <aranea@×××××.de>
To: gentoo-dev@l.g.o
Cc: selinux@g.o, gnome@g.o
Subject: [gentoo-dev] [PATCH] gnome2-utils.eclass: Fix SELinux labeling issue in gnome2_gdk_pixbuf_update()
Date: Fri, 07 Feb 2014 18:22:53
Message-Id: 20140207192220.081c9b9f@gentp.lnet
1 The internals of gnome2-utils.eclass' gnome2_gdk_pixbuf_update(), which
2 is responsable for updating x11-libs/gdk-pixbuf's loaders.cache,
3 unfortunately cause problems with SELinux, as the mentioned file
4 doesn't get a correct context and is therefore inaccessible by
5 applications.
6
7 The trivial patch which I've proposed on b.g.o (#499636) has already been
8 acknowledged by the SELinux and GNOME herds, however the latter asked
9 me to send a mail to this ML as well. So, does anyone have objections
10 about this change?
11
12
13 --- gnome2-utils.eclass 2014-01-28 23:14:31.419135392 +0100
14 +++ gnome2-utils.eclass 2014-01-28 23:17:06.569269202 +0100
15 @@ -436,7 +436,8 @@
16 local tmp_file=$(mktemp -t tmp.XXXXXXXXXX_gdkpixbuf)
17 ${updater} 1> "${tmp_file}" &&
18 chmod 0644 "${tmp_file}" &&
19 - mv -f "${tmp_file}" "${EROOT}usr/$(get_libdir)/gdk-pixbuf-2.0/2.10.0/loaders.cache"
20 + cp -f "${tmp_file}" "${EROOT}usr/$(get_libdir)/gdk-pixbuf-2.0/2.10.0/loaders.cache" &&
21 + rm "${tmp_file}" # don't replace this with mv, required for SELinux support
22 eend $?
23 }
24
25
26
27 --
28 Luis Ressel <aranea@×××××.de>
29 GPG fpr: F08D 2AF6 655E 25DE 52BC E53D 08F5 7F90 3029 B5BD

Attachments

File name MIME type
signature.asc application/pgp-signature