[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] warn on missing selinux files
From: |
Bruno Haible |
Subject: |
Re: [PATCH] warn on missing selinux files |
Date: |
Sat, 27 Jun 2009 14:19:48 +0200 |
User-agent: |
KMail/1.9.9 |
Paolo Bonzini wrote:
> Compiling a package without SELinux support can be a security problem.
> ...
> I'd like to include this check in sed 4.2.1 to warn packagers about the
> additional dependency.
Can you explain why 'sed' is to be bothered about selinux at all? 'sed'
does not do anything security relevant (uids, gids, passwords). It does
access files. But isn't the necessary logic abstracted in the open()
system call?
> + if test "$ac_cv_search_setfilecon" = no &&
> + test "$host" = "$build" && test -f /selinux/enforce; then
This requires adding
AC_REQUIRE([AC_CANONICAL_HOST])
AC_REQUIRE([AC_CANONICAL_BUILD])
Bruno
Re: [PATCH] warn on missing selinux files, Jim Meyering, 2009/06/27