Package: libselinux / 2.5-3

Metadata

Package Version Patches format
libselinux 2.5-3 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
fix makefile bugs.patch | (download)

Makefile | 14 3 + 11 - 0 !
src/Makefile | 20 14 + 6 - 0 !
2 files changed, 17 insertions(+), 17 deletions(-)

 various makefile bugfixes and improvements
 Fix 1: Allow Debian packaging to override which directory we expect to find
 libsepol.a in.
 .
 Fix 2: Add clean-pywrap/clean-rubywrap targets and pass all of the *wrap
 targets through to the src/Makefile (EG: install-pywrap/install-rubywrap).
 .
 Fix 3: Newer SWIG only wants a single .i file on the command line, and
 errors out if you give it extras (which are already included).  Fix the
 command line in the $(SWIGCOUT) target and make "swigify" depend on it.
 .
 The first fix was extracted from the old Debian patch.
 .
 Tweaked for version 2.1.9 by Russell Coker
fix cross compile.patch | (download)

src/Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix cross-compilation
 Don't forcibly -I/usr/include during the build process, the compiler
 already knows how to look in that directory.
 .
0003 Avoid mounting proc outside of selinux_init_load_pol.patch | (download)

src/init.c | 20 3 + 17 - 0 !
src/load_policy.c | 15 10 + 5 - 0 !
2 files changed, 13 insertions(+), 22 deletions(-)

 avoid mounting /proc outside of selinux_init_load_policy().

Temporarily mounting /proc within selinuxfs_exists() can cause
problems since it can be called by a libselinux constructor and
therefore may be invoked by every program linked with libselinux.
Since this was only motivated originally by a situation where
selinuxfs_exists() was called from selinux_init_load_policy()
before /proc was mounted, fix it in selinux_init_load_policy() instead.

This reverts commit 5a8d8c499b2ef80eaa7b5abe2ec68d7101e613bf
("libselinux: only mount /proc if necessary") and
commit 9df498884665d79474b79f0f30d1cd67df11bd3e
("libselinux: Mount procfs before checking /proc/filesystems").

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>