Hi,
This is the patch I'm currently testing:
--- standard 2005-10-14 02:47:56.000000000 +0200
+++ /etc/cron.daily/standard 2005-10-14 01:52:34.000000000 +0200
@@ -39,6 +39,8 @@
chmod 600 passwd.bak)
cmp -s group.bak /etc/group || (cp -p /etc/group group.bak &&
chmod 600 group.bak)
+ if test ! -x /usr/sbin/selinuxenabled || \
+ ! /usr/sbin/selinuxenabled; then
if [ -f /etc/shadow ] ; then
cmp -s shadow.bak /etc/shadow || (cp -p /etc/shadow shadow.bak
&&
chmod 600 shadow.bak)
@@ -47,6 +49,7 @@
cmp -s gshadow.bak /etc/gshadow || (cp -p /etc/gshadow
gshadow.bak &&
chmod 600 gshadow.bak)
fi
+ fi
fi
if cd $bak ; then
It is suboptimal - it will disable the backups on SELinux - but it will
work at least... I'm fairly confident that this doesn't have bad effects
on non-selinux-systems or systems that do have the selinux packages
installed but are currently not in selinux mode...
After all, it's a very simple patch, and it makes the daily errors go
away.
best regards,
Erich Schubert
--
erich@(vitavonni.de|debian.org) -- GPG Key ID: 4B3A135C (o_
A polar bear is a rectangular bear after a coordinate transform. //\
Wo befreundete Wege zusammenlaufen, da sieht die ganze Welt für V_/_
eine Stunde wie eine Heimat aus. --- Herrmann Hesse
