diff options
author | Philip Tricca <flihp@twobit.us> | 2016-02-20 17:55:59 +0000 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-02-28 11:32:59 +0000 |
commit | 07e1f10aa06851285b710b8bc8660f6ff87a4823 (patch) | |
tree | 9b54b049d6409b0d227f405d01a2aa6add86d6f0 | |
parent | 8d07e14009c14cad55e6629216684661791af906 (diff) | |
download | poky-07e1f10aa06851285b710b8bc8660f6ff87a4823.tar.gz |
sysvinit-inittab: Move start_getty scrip to base_bindir.
When this file is in ${sysconfdir}/init.d, SELinux labels it as a generic
init script (initrc_t). This causes problms at runtime because SELinux
doesn't let the login process execute generic init script. Moving this
helper script to base_bindir results in it being labeled as a generic
binary (bin_t). Nearly every SELinux domain is allowed to execute
generic binaries and the login process is one of them.
(From OE-Core rev: 826bfea4b7018c7974ef388facc99ca70bb3654f)
Signed-off-by: Philip Tricca <flihp@twobit.us>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r-- | meta/recipes-core/sysvinit/sysvinit-inittab_2.88dsf.bb | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/meta/recipes-core/sysvinit/sysvinit-inittab_2.88dsf.bb b/meta/recipes-core/sysvinit/sysvinit-inittab_2.88dsf.bb index f539da8dda..c5b8cdca95 100644 --- a/meta/recipes-core/sysvinit/sysvinit-inittab_2.88dsf.bb +++ b/meta/recipes-core/sysvinit/sysvinit-inittab_2.88dsf.bb | |||
@@ -17,9 +17,9 @@ do_compile() { | |||
17 | 17 | ||
18 | do_install() { | 18 | do_install() { |
19 | install -d ${D}${sysconfdir} | 19 | install -d ${D}${sysconfdir} |
20 | install -d ${D}${sysconfdir}/init.d | ||
21 | install -m 0644 ${WORKDIR}/inittab ${D}${sysconfdir}/inittab | 20 | install -m 0644 ${WORKDIR}/inittab ${D}${sysconfdir}/inittab |
22 | install -m 0755 ${WORKDIR}/start_getty ${D}${sysconfdir}/init.d/start_getty | 21 | install -d ${D}${base_bindir} |
22 | install -m 0755 ${WORKDIR}/start_getty ${D}${base_bindir}/start_getty | ||
23 | 23 | ||
24 | set -x | 24 | set -x |
25 | tmp="${SERIAL_CONSOLES}" | 25 | tmp="${SERIAL_CONSOLES}" |
@@ -27,7 +27,7 @@ do_install() { | |||
27 | do | 27 | do |
28 | j=`echo ${i} | sed s/\;/\ /g` | 28 | j=`echo ${i} | sed s/\;/\ /g` |
29 | label=`echo ${i} | sed -e 's/tty//' -e 's/^.*;//' -e 's/;.*//'` | 29 | label=`echo ${i} | sed -e 's/tty//' -e 's/^.*;//' -e 's/;.*//'` |
30 | echo "$label:12345:respawn:${sysconfdir}/init.d/start_getty ${j}" >> ${D}${sysconfdir}/inittab | 30 | echo "$label:12345:respawn:${base_bindir}/start_getty ${j}" >> ${D}${sysconfdir}/inittab |
31 | done | 31 | done |
32 | 32 | ||
33 | if [ "${USE_VT}" = "1" ]; then | 33 | if [ "${USE_VT}" = "1" ]; then |
@@ -76,7 +76,7 @@ fi | |||
76 | # Set PACKAGE_ARCH appropriately. | 76 | # Set PACKAGE_ARCH appropriately. |
77 | PACKAGE_ARCH = "${MACHINE_ARCH}" | 77 | PACKAGE_ARCH = "${MACHINE_ARCH}" |
78 | 78 | ||
79 | FILES_${PN} = "${sysconfdir}/inittab ${sysconfdir}/init.d/start_getty" | 79 | FILES_${PN} = "${sysconfdir}/inittab ${base_bindir}/start_getty" |
80 | CONFFILES_${PN} = "${sysconfdir}/inittab" | 80 | CONFFILES_${PN} = "${sysconfdir}/inittab" |
81 | 81 | ||
82 | USE_VT ?= "1" | 82 | USE_VT ?= "1" |