Summary:ASTERISK-03088: libs installed in /usr/lib get wrong SELinux context; asterisk will not run
Reporter:Steve Murphy (murf)Labels:
Date Opened:2004-12-24 13:07:25.000-0600Date Closed:2008-06-07 10:46:54
Versions:Frequency of
Environment:Attachments:( 0) libpri-selinux-patch
( 1) zapata-selinux-patch
( 2) zaptel-selinux-patch
Description:When libtonezone.so, libpri.so are installed into /usr/lib via the install utility, they end up with the context of /usr/lib instead of a .so file. This makes them unloadable under FC3. I've included a line in each of the makefiles to run restorecon on the installed lib files to set the proper context, hopefully conditionally enough that other os's and those with SELinux disabled, will not be affected.

****** STEPS TO REPRODUCE ******

Upgrade from RH9, or fresh install FC3, and use up2date to fully patch the OS. Fetch fresh CVS, build and install everything. Every now and then, go into libpri, zaptel to do cvs updates and installs.


I found that restorecon -v -R /usr/lib doesn't help.
Comments:By: Olle Johansson (oej) 2004-12-25 02:46:08.000-0600

murf: Disclaimer?

By: Steve Murphy (murf) 2004-12-25 10:34:23.000-0600

I faxed one in last year, I think. Mayhaps Mark could go thru the pile and
put them on some developer-only webpage, so as to minimize the checking for this... I think I've been queried maybe 6 times about this in the last few months.
It's no big bother to me, and if mine is not to be found, I'm always happy to send  another.

By: Brian West (bkw918) 2004-12-25 11:14:46.000-0600

FYI you get extra karma points when you mention your disclaimer when you post the bugs ;)


By: Mark Spencer (markster) 2004-12-26 18:19:56.000-0600

Fixed in CVS, thanks!

By: Russell Bryant (russell) 2004-12-26 19:07:39.000-0600

fixed in 1.0

By: Digium Subversion (svnbot) 2008-06-07 10:46:52

Repository: dahdi
Revision: 520

U   trunk/Makefile

r520 | markster | 2008-06-07 10:46:52 -0500 (Sat, 07 Jun 2008) | 2 lines

Fix for SE Linux (bug ASTERISK-3088)



By: Digium Subversion (svnbot) 2008-06-07 10:46:54

Repository: dahdi
Revision: 521

U   branches/v1-0/Makefile

r521 | russell | 2008-06-07 10:46:53 -0500 (Sat, 07 Jun 2008) | 2 lines

Fix for SE Linux (bug ASTERISK-3088)