Red Hat Bugzilla – Bug 255441
missing Requires: libselinux-devel
Last modified: 2007-11-30 17:12:14 EST
Description of problem:
/usr/bin/ps uses dlopen() on libselinux.so in order to determine the selinux
security contexts for each process. libselinux.so recently moved from the
libselinux package to libselinux-devel. However, procps has no 'Requires:
libselinux-devel' in order to satisfy the libselinux.so requirement.
Alternately, procps could be modified to open libselinux.so.1 directly, instead
of using the unversioned symlink.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Perform a fresh F-7 install and upgrade to the latest Rawhide
2. Notice that libselinux-devel is not installed
3. run 'strace -o trace.out ps auwxZ | head'
Security contexts are displayed as '-'. The strace output shows that
libselinux.so could not be found.
Security contexts displayed as they were before.
I suspect this wasn't a problem before because almost every installation has
libselinux installed, even if selinux is disabled. But since the libselinux.so
symlink moved to libselinux-devel, it's not safe to assume that libselinux.so is
I prefer opening libselinux.so.1 instead of adding a dependency on devel
package. This should be fixed in the next release.
This bug exists in F7 as well.
yum remove libselinux-devel
yields "-" for all labels.
Why should a devel library be needed for "ps" ?
Upstream procps always dlopen's libselinux.so.1.
This bug is specific to the Fedora procps and its patches.
I'll try to explain... This is a "double bug": procps shouldn't have dlopened
the nonversioned DSO and libselinux (non-devel) shouldn't have provided that
DSO. The recent Koji build of libselinux for F-7 has this in the changelog:
* Thu Sep 27 2007 Dan Walsh <firstname.lastname@example.org> - 2.0.14-10
- Move libselinux.so back to base package
* Fri Aug 10 2007 Dan Walsh <email@example.com> - 2.0.14-5
- Move libselinux.so to devel package
This doesn't mean Stephen is not right. I only considered this to be a minor
problem in F-7 (.so was in the base package then) and fixed it only in rawhide.
I'll fix it also in F-7.
procps-3.2.7-16.1.fc7 has been pushed to the Fedora 7 testing repository. If problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
su -c 'yum --enablerepo=updates-testing update procps'
procps-3.2.7-16.1.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.