Red Hat Bugzilla – Bug 255441
missing Requires: libselinux-devel
Last modified: 2007-11-30 17:12:14 EST
Description of problem: /usr/bin/ps uses dlopen() on libselinux.so in order to determine the selinux security contexts for each process. libselinux.so recently moved from the libselinux package to libselinux-devel. However, procps has no 'Requires: libselinux-devel' in order to satisfy the libselinux.so requirement. Alternately, procps could be modified to open libselinux.so.1 directly, instead of using the unversioned symlink. Version-Release number of selected component (if applicable): procps-3.2.7-15.1.fc8 How reproducible: Always Steps to Reproduce: 1. Perform a fresh F-7 install and upgrade to the latest Rawhide 2. Notice that libselinux-devel is not installed 3. run 'strace -o trace.out ps auwxZ | head' Actual results: Security contexts are displayed as '-'. The strace output shows that libselinux.so could not be found. Expected results: Security contexts displayed as they were before. Additional Notes: I suspect this wasn't a problem before because almost every installation has libselinux installed, even if selinux is disabled. But since the libselinux.so symlink moved to libselinux-devel, it's not safe to assume that libselinux.so is installed anymore.
I prefer opening libselinux.so.1 instead of adding a dependency on devel package. This should be fixed in the next release.
This bug exists in F7 as well. yum remove libselinux-devel ps -Z yields "-" for all labels.
Why should a devel library be needed for "ps" ?
Upstream procps always dlopen's libselinux.so.1. This bug is specific to the Fedora procps and its patches.
I'll try to explain... This is a "double bug": procps shouldn't have dlopened the nonversioned DSO and libselinux (non-devel) shouldn't have provided that DSO. The recent Koji build of libselinux for F-7 has this in the changelog: * Thu Sep 27 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.14-10 - Move libselinux.so back to base package <...> * Fri Aug 10 2007 Dan Walsh <dwalsh@redhat.com> - 2.0.14-5 - Move libselinux.so to devel package This doesn't mean Stephen is not right. I only considered this to be a minor problem in F-7 (.so was in the base package then) and fixed it only in rawhide. I'll fix it also in F-7.
procps-3.2.7-16.1.fc7 has been pushed to the Fedora 7 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update procps'
procps-3.2.7-16.1.fc7 has been pushed to the Fedora 7 stable repository. If problems still persist, please make note of it in this bug report.