Bug 223899
Summary: | Requires(post): policycoreutils | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Curtis Doty <curtis> |
Component: | bind | Assignee: | Adam Tkac <atkac> |
Status: | CLOSED RAWHIDE | QA Contact: | Ben Levenson <benl> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 6 | CC: | ovasik |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2007-02-01 14:15:04 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Curtis Doty
2007-01-22 22:46:09 UTC
You can turn off all selinux parts/dependencies by selinux macro. But if we use selinux we need the restorecon and policycoreutils... THat's my point. When one chooses not to use selinux, then bind should not create arbitrary dependencies. Especially when: - the deps are only in %post scripts that can be easily fixed with a simple [ -e /sbin/restorecon ] && /sbin/restorecon yadda - there already exists an unfixed bug in rpm that prevents enforcement of this dep until it's too late In other words, if they have bind and selinux, then restorecon sure. But why exactly is restorecon needed for bind without selinux? This is arbitrary and unneccsary complexity. Especially since policycoreutils drags in even *more* package deps. I think the best fix could be put "[ -e /selinux/enforce ] && [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.* /etc/named.* >/dev/null 2>&1 ;" into %if %{selinux} %endif statement. If exists bug in rpm it could be fixed in future and all could works fine. I'm going to fix this problem in rawhide |