Your message dated Sun, 20 Sep 2015 15:40:24 +0000
with message-id <[email protected]>
and subject line Bug#569698: fixed in selinux-basics 0.5.3
has caused the Debian Bug report #569698,
regarding /etc/init.d/selinux-basics should not umount -a
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
569698: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569698
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: selinux-basics
Version: 0.3.5+nmu1
Severity: important
Tags: patch
An "umount -a" is invoked in selinux-complete-relable() of
/etc/init.d/selinux-basics. This was ok in prior versions
because a reboot -f followed. Today, only a reboot without
option -f is invoked which amounts to a "shutdown -r now".
As a result, file systems are unmounted later in shutdown
process. Therefore, a umount is not necessary in this
script.
My server failed to change into runlevel 6 after
unmounting file systems.
-- /var/log/boot (relevant part)
Sun Feb 7 22:57:20 2010: Checking SELinux contexts: selinux-basics
Sun Feb 7 22:57:20 2010: Relabeling your filesystems for SELinux......Cleaning
out /tmp
Sun Feb 7 22:57:21 2010: *****************
Sun Feb 7 22:57:37 2010: Relabeled, now reboot
Sun Feb 7 22:57:37 2010: umount: /var: device is busy
Sun Feb 7 22:57:37 2010: umount: /dev: device is busy
Sun Feb 7 22:57:38 2010: Checking minimum space in /tmp...done.
Sun Feb 7 22:57:38 2010: Setting up networking....
Sun Feb 7 22:57:38 2010: Configuring network interfaces...done.
Sun Feb 7 22:57:39 2010: /etc/rcS.d/S55bootmisc.sh: line 50: savelog: command
not found
Sun Feb 7 22:57:39 2010: rm: cannot remove `/tmp/.clean': Read-only file system
Sun Feb 7 22:57:39 2010: Initializing random number
generator.../etc/rcS.d/S55urandom: line 31: find: command not found
Sun Feb 7 22:57:39 2010: /etc/rcS.d/S55urandom: line 32: [: : integer
expression expected
Sun Feb 7 22:57:39 2010: done.
Sun Feb 7 22:57:39 2010: /etc/rcS.d/S70screen-cleanup: line 27: find: command
not found
Sun Feb 7 22:57:39 2010: /etc/rcS.d/S70screen-cleanup: line 27: xargs: command
not found
Sun Feb 7 22:57:39 2010: INIT: Entering runlevel: 2
Sun Feb 7 22:57:39 2010: Running local boot scripts (/etc/rc.local).
Sun Feb 7 22:57:40 2010:
-- end /var/log/boot
Though I am not abled to reproduce the error in a test
environment, I suggest to remove the "umount -a" because
it is redundant in most cases and fatal on maybe some
more machines.
After removing it the relabeling worked fine.
-- /var/log/boot (relevant part)
Sat Feb 13 14:29:16 2010: Checking SELinux contexts: selinux-basics
Sat Feb 13 14:29:16 2010: Relabeling your filesystems for SELinux......Cleaning
out /tmp
Sat Feb 13 14:29:17 2010: *****************
Sat Feb 13 14:29:30 2010: Relabeled, now reboot
Sat Feb 13 14:29:31 2010: INIT: Switching to runlevel: 6
-- end /var/log/boot
diff -urN a/etc/init.d/selinux-basics b/etc/init.d/selinux-basics
--- a/etc/init.d/selinux-basics 2010-02-13 14:52:39.000000000 +0100
+++ b/etc/init.d/selinux-basics 2010-02-13 14:53:02.000000000 +0100
@@ -61,7 +61,6 @@
# re-enable SELinux if enabled before
if [ ! -f /.autorelabel ]; then
echo "Relabeled, now reboot"
- umount -a || true
sync
reboot
fi
--- End Message ---
--- Begin Message ---
Source: selinux-basics
Source-Version: 0.5.3
We believe that the bug you reported is fixed in the latest version of
selinux-basics, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurent Bigonville <[email protected]> (supplier of updated selinux-basics
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 20 Sep 2015 15:54:34 +0200
Source: selinux-basics
Binary: selinux-basics
Architecture: source all
Version: 0.5.3
Distribution: experimental
Urgency: medium
Maintainer: Debian SELinux maintainers <[email protected]>
Changed-By: Laurent Bigonville <[email protected]>
Description:
selinux-basics - SELinux basic support
Closes: 542907 569698 727305 796693
Changes:
selinux-basics (0.5.3) experimental; urgency=medium
.
* Team upload.
* Drop the selinux-basics initscript, this package is not responsible
anymore for relabeling the filesystem on boot. Please see new
policycoreutils (>= 2.4) version. (Closes: #569698, #542907, #796693,
#727305)
* check-selinux-installation: Switch to python3
* debian/compat: Bump compat version to 9
* debian/control: Bump Standards-Version to 3.9.6 (no further changes)
* selinux-activate: Do not modify the kdm pam service anymore, latest
version of the kdm package is properly calling pam_selinux already.
* selinux-activate: Expect selinuxfs to be mounted under /sys/fs/selinux
* debian/control: Add dh-python to the Build-Depends
* debian/control: Add ${perl:Depends} to the dependency list
* debian/control: Add policycoreutils-python-utils to the Recommends
Checksums-Sha1:
4b4860503fb93f7e1ec945a1f852e0efd8bec1c8 1346 selinux-basics_0.5.3.dsc
c0ff71d8b9675e4a63ec81e94841659c9b19012e 10360 selinux-basics_0.5.3.tar.xz
2d622613fd8abb8d06f36cdbb5cfa517ec10a3be 14406 selinux-basics_0.5.3_all.deb
Checksums-Sha256:
b02ab26dd7f9133d45aa5a645f91bc0ce0588bbb44540d1dabc9f3548f0ec0d5 1346
selinux-basics_0.5.3.dsc
ea16df927ec726b71617ba5808f67c1fa5ddfb25999ebbe2a84a81486615d7e9 10360
selinux-basics_0.5.3.tar.xz
27c98d59092155aef4782c7fc8d161346febd29c844ebc8378c2f61d58d8b2c7 14406
selinux-basics_0.5.3_all.deb
Files:
2b90a1080afdf6c6f889f306c32c37e8 1346 admin optional selinux-basics_0.5.3.dsc
52e8c8cff7f9fc037d40b44c6d098574 10360 admin optional
selinux-basics_0.5.3.tar.xz
42e3875deed89c79e9362e63b6b0f960 14406 admin optional
selinux-basics_0.5.3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJV/rtzAAoJEB/FiR66sEPVd1AH/2tCIA92eHb+5uRrEGUkymt2
PC4EGhe3NUWxj8jxjmm2BxF38/fa1U7gbCsRfUU7meYLoLWvsAKAJNbmWHI5AZv+
Pf5ORp4KNxo1sv2AEG44PDpSS3/TU8aZBOQWRMvA3aBl2gd3oJbmt+pdjBzYdwwf
DjB+aCpLMBVTEn56T5x719gOUjV7YxoqU5TJjKfQ0CftDnfwgjCjA0NmjGhp++vQ
cLNmxkj7EUraGMhWmBYQB3GWImNQdDcE73khIhPa3Zm3lKWG3BjqLag/FVDRLIIv
47VkITlPnaIitkI9zUpacRWVoIoUKf88JPtcAPwRKssBNVS60qQNH23kBsEz0IE=
=o5Ks
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel
