Bug 255441 - missing Requires: libselinux-devel
Summary: missing Requires: libselinux-devel
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: procps
Version: rawhide
Hardware: All
OS: All
medium
low
Target Milestone: ---
Assignee: Tomas Smetana
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-08-26 20:53 UTC by Wart
Modified: 2007-11-30 22:12 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2007-08-27 07:33:15 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Wart 2007-08-26 20:53:12 UTC
Description of problem:
/usr/bin/ps uses dlopen() on libselinux.so in order to determine the selinux
security contexts for each process.  libselinux.so recently moved from the
libselinux package to libselinux-devel.  However, procps has no 'Requires:
libselinux-devel' in order to satisfy the libselinux.so requirement. 
Alternately, procps could be modified to open libselinux.so.1 directly, instead
of using the unversioned symlink.

Version-Release number of selected component (if applicable):
procps-3.2.7-15.1.fc8

How reproducible:
Always

Steps to Reproduce:
1. Perform a fresh F-7 install and upgrade to the latest Rawhide
2. Notice that libselinux-devel is not installed
3. run 'strace -o trace.out ps auwxZ | head'
  
Actual results:
Security contexts are displayed as '-'.  The strace output shows that
libselinux.so could not be found.

Expected results:
Security contexts displayed as they were before.

Additional Notes:
I suspect this wasn't a problem before because almost every installation has
libselinux installed, even if selinux is disabled.  But since the libselinux.so
symlink moved to libselinux-devel, it's not safe to assume that libselinux.so is
installed anymore.

Comment 1 Tomas Smetana 2007-08-27 06:47:59 UTC
I prefer opening libselinux.so.1 instead of adding a dependency on devel
package.    This should be fixed in the next release.

Comment 3 Stephen Smalley 2007-11-01 13:49:48 UTC
This bug exists in F7 as well.
yum remove libselinux-devel
ps -Z
yields "-" for all labels.


Comment 4 James Morris 2007-11-01 13:51:13 UTC
Why should a devel library be needed for "ps" ?

Comment 5 Stephen Smalley 2007-11-01 14:19:54 UTC
Upstream procps always dlopen's libselinux.so.1.
This bug is specific to the Fedora procps and its patches.


Comment 6 Tomas Smetana 2007-11-01 15:12:37 UTC
I'll try to explain...  This is a "double bug": procps shouldn't have dlopened
the nonversioned DSO and libselinux (non-devel) shouldn't have provided that
DSO.  The recent Koji build of libselinux for F-7 has this in the changelog:

* Thu Sep 27 2007 Dan Walsh <dwalsh> - 2.0.14-10
- Move libselinux.so back to base package

<...>

* Fri Aug 10 2007 Dan Walsh <dwalsh> - 2.0.14-5
- Move libselinux.so to devel package

This doesn't mean Stephen is not right.  I only considered this to be a minor
problem in F-7 (.so was in the base package then) and fixed it only in rawhide.
 I'll fix it also in F-7.

Comment 7 Fedora Update System 2007-11-09 23:44:29 UTC
procps-3.2.7-16.1.fc7 has been pushed to the Fedora 7 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update procps'

Comment 8 Fedora Update System 2007-11-26 18:40:32 UTC
procps-3.2.7-16.1.fc7 has been pushed to the Fedora 7 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.