Package: dirmngr
Version: 1.1.1-1.2
Severity: normal
Tags: patch

When an init script creates a directory it needs to run restorecon to ensure
that the correct SE Linux context is used.  I have attached a patch to do this.

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dirmngr depends on:
ii  adduser        3.113+nmu3
ii  libassuan0     2.1.1-1
ii  libc6          2.19-4
ii  libgcrypt11    1.5.3-4
ii  libgpg-error0  1.12-0.2
ii  libksba8       1.3.0-3
ii  libldap-2.4-2  2.4.39-1
ii  libpth20       2.0.7-19
ii  lsb-base       4.1+Debian13

dirmngr recommends no packages.

dirmngr suggests no packages.

-- Configuration Files:
/etc/init.d/dirmngr changed:
PATH=/sbin:/bin:/usr/sbin:/usr/bin
NAME=dirmngr
DAEMON=/usr/bin/$NAME
PIDFILE=/var/run/$NAME.pid
test -x $DAEMON || exit 5
if [ -r /etc/default/$NAME ]; then
        . /etc/default/$NAME
fi
.. /lib/lsb/init-functions
d_start() {
        if pidofproc $DAEMON >/dev/null; then
                :
        else
                mkdir -p /var/run/dirmngr || return 1
                chown dirmngr:dirmngr /var/run/dirmngr || return 1
                [ -x /sbin/restorecon ] && /sbin/restorecon /var/run/dirmngr
                output=$(start-stop-daemon --start --quiet --exec $DAEMON 
--oknodo --pidfile $PIDFILE --umask 027 --chuid dirmngr -- --daemon --sh) || 
return 1
                eval "$output" || return 1
                pid=$(echo "$DIRMNGR_INFO" | cut -d : -f 2) || return 1
                echo "$pid" >$PIDFILE || return 1
                chmod ${DIRMNGR_SOCKET_MODE:-0777} /var/run/dirmngr/socket || 
return 1
        fi
        return 0
}
case "$1" in
    start)
        log_daemon_msg "Starting DirMngr" $NAME
        d_start
        log_end_msg $?
        ;;
    stop)
        log_daemon_msg "Stopping DirMngr" $NAME
        killproc $DAEMON
        log_end_msg $?
        ;;
    status)
        status_of_proc $DAEMON DirMngr
        ;;
    restart)
        $0 stop && sleep 1 && $0 start
        ;;
    try-restart)
        if $0 status >/dev/null; then
                $0 restart
        else
                exit 0
        fi
        ;;
    reload|force-reload)
        log_daemon_msg "Reloading DirMngr configuration" $NAME
        killproc $DAEMON HUP
        log_end_msg $?
        ;;
    *)
        log_failure_msg "Usage: $0 
{start|stop|status|restart|try-restart|reload|force-reload}"
        exit 2
        ;;
esac


-- no debconf information
--- dirmngr.orig	2014-06-25 14:09:23.163597588 +1000
+++ dirmngr	2014-06-25 14:09:08.419469284 +1000
@@ -31,6 +31,7 @@
 	else
 		mkdir -p /var/run/dirmngr || return 1
 		chown dirmngr:dirmngr /var/run/dirmngr || return 1
+		[ -x /sbin/restorecon ] && /sbin/restorecon /var/run/dirmngr
 
 		output=$(start-stop-daemon --start --quiet --exec $DAEMON --oknodo --pidfile $PIDFILE --umask 027 --chuid dirmngr -- --daemon --sh) || return 1
 		eval "$output" || return 1

Reply via email to