Bug#506917: pbuilder does not work correctly with selinux if selinux-utils is not installed

Loïc Minier lool at dooz.org
Wed Nov 26 12:34:02 UTC 2008


On Wed, Nov 26, 2008, Alexander Block wrote:
> /selinux is mounted with fs type 'selinuxfs', which I expect to be not  
> available when selinux is disabled. Can't you try to mount it always and  
> ignore if it fails?

 I guess that would work; a minor concern is that it would be hard to
 distinguish a mount error which we should honor if people care about
 selinux in their pbuilder from a mount error which we should ignore
 because the host doesn't have selinux support.

> And even if does not fail on a system without /selinux, would this be a  
> problem?

 I don't think so.  TBH, I don't think pbuilder should copy the hosts'
 support for selinux but rather use the recommended setup for build
 environments (which probably would be to disable selinux), and allow
 enabling it -- or let people enable it in hooks, and provide a sample
 hook.  But perhaps selinux support is required in the chroot if the
 host is running selinux, dunno.

-- 
Loïc Minier





More information about the Pbuilder-maint mailing list