Bug 431111 - initramfs needs to be able to load SELinux policy
Summary: initramfs needs to be able to load SELinux policy
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: mkinitrd
Version: rawhide
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Peter Jones
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: upstart 431115
TreeView+ depends on / blocked
 
Reported: 2008-01-31 20:16 UTC by Bill Nottingham
Modified: 2014-03-17 03:12 UTC (History)
4 users (show)

Fixed In Version: 6.0.30-1.fc9
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-02-25 21:00:41 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
Patch! (2.39 KB, patch)
2008-01-31 20:16 UTC, Bill Nottingham
no flags Details | Diff

Description Bill Nottingham 2008-01-31 20:16:37 UTC
Description of problem:

Patch attached, as discussed on SELinux lists.

Version-Release number of selected component (if applicable):

mkinitrd-6.0.28-3.fc9.x86_64

Comment 1 Bill Nottingham 2008-01-31 20:16:37 UTC
Created attachment 293643 [details]
Patch!

Comment 2 Jeremy Katz 2008-01-31 20:55:18 UTC
With this patch, if you change your selinux settings, you also have to rebuild
your initrd.  Which is kind of crappy

Comment 3 Bill Nottingham 2008-01-31 21:00:43 UTC
It reads the config from the root fs, not the initrd.

Comment 4 Jeremy Katz 2008-02-01 16:34:07 UTC
It reads the config from the rootfs when we build the initrd.  Sourcing the file
from the script running in nash is going to be ugly, though.  And another
built-in is just piling on more hacks.  Must. bash-ify. initrd.

Comment 5 Bill Nottingham 2008-02-01 16:37:43 UTC
Well, you can just always add 'load_policy'  instead; it won't do anything if
it's not configured at the time it boots.

Comment 6 Bill Nottingham 2008-02-25 21:00:41 UTC
This should be fixed in 6.0.30-1.


Note You need to log in before you can comment on or make changes to this bug.