Summary:	ASTERISK-03088: libs installed in /usr/lib get wrong SELinux context; asterisk will not run
Reporter:	Steve Murphy (murf)	Labels:
Date Opened:	2004-12-24 13:07:25.000-0600	Date Closed:	2008-06-07 10:46:54
Priority:	Critical	Regression?	No
Status:	Closed/Complete	Components:	Core/General
Versions:		Frequency of Occurrence
Related Issues:
Environment:		Attachments:	( 0) libpri-selinux-patch ( 1) zapata-selinux-patch ( 2) zaptel-selinux-patch
Description:	When libtonezone.so, libpri.so are installed into /usr/lib via the install utility, they end up with the context of /usr/lib instead of a .so file. This makes them unloadable under FC3. I've included a line in each of the makefiles to run restorecon on the installed lib files to set the proper context, hopefully conditionally enough that other os's and those with SELinux disabled, will not be affected. ****** STEPS TO REPRODUCE ****** Upgrade from RH9, or fresh install FC3, and use up2date to fully patch the OS. Fetch fresh CVS, build and install everything. Every now and then, go into libpri, zaptel to do cvs updates and installs. ****** ADDITIONAL INFORMATION ****** I found that restorecon -v -R /usr/lib doesn't help.
Comments:	By: Olle Johansson (oej) 2004-12-25 02:46:08.000-0600 murf: Disclaimer? By: Steve Murphy (murf) 2004-12-25 10:34:23.000-0600 I faxed one in last year, I think. Mayhaps Mark could go thru the pile and put them on some developer-only webpage, so as to minimize the checking for this... I think I've been queried maybe 6 times about this in the last few months. It's no big bother to me, and if mine is not to be found, I'm always happy to send  another. By: Brian West (bkw918) 2004-12-25 11:14:46.000-0600 FYI you get extra karma points when you mention your disclaimer when you post the bugs ;) bkw By: Mark Spencer (markster) 2004-12-26 18:19:56.000-0600 Fixed in CVS, thanks! By: Russell Bryant (russell) 2004-12-26 19:07:39.000-0600 fixed in 1.0 By: Digium Subversion (svnbot) 2008-06-07 10:46:52 Repository: dahdi Revision: 520 U   trunk/Makefile ------------------------------------------------------------------------ r520 | markster | 2008-06-07 10:46:52 -0500 (Sat, 07 Jun 2008) | 2 lines Fix for SE Linux (bug ASTERISK-3088) ------------------------------------------------------------------------ http://svn.digium.com/view/dahdi?view=rev&revision=520 By: Digium Subversion (svnbot) 2008-06-07 10:46:54 Repository: dahdi Revision: 521 U   branches/v1-0/Makefile ------------------------------------------------------------------------ r521 | russell | 2008-06-07 10:46:53 -0500 (Sat, 07 Jun 2008) | 2 lines Fix for SE Linux (bug ASTERISK-3088) ------------------------------------------------------------------------ http://svn.digium.com/view/dahdi?view=rev&revision=521