On Tuesday 28 December 2004 03:32, Colin Walters <walters(a)redhat.com> wrote:
On Mon, 2004-12-27 at 21:42 +1100, Russell Coker wrote:
> Report a bug to whoever provided the collection of files that their
> install script should do the following:
> restorecon /usr/X11R6/lib/libXvMCNVIDIA.so.1.0.6629
> restorecon /usr/lib/libGL.so.1.0.6629
Dan recently worked on a patch for coreutils to make the 'install'
command do this internally. I don't think we can ask every ISV to
insert restorecon commands at arbitrary points in their code. Saying
however that they must use the 'install' command (or RPM) to install
software is a much more defensible position, IMO.
Valdis just said that they have specific builds for different distributions
and different versions of the various distributions. As they already have
such a variation, adding another simple thing such as restorecon is not
asking a lot (IMHO).
Also if they would just use RPMs to deliver their software then many of these
issues would get solved for them.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page