[Bug 473348] Review Request: drraw - Web based presentation front-end for RRDtool

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=473348





--- Comment #6 from Gabriel Somlo <somlo at cmu.edu>  2009-06-23 15:36:21 EDT ---
also not an official review (yet) :)

Installing your drraw-selinux subpackage didn't actually make any difference
for me (stock up-to-date f10 install, selinux set to enforcing).

The error logged to syslog advised me to run 'sealert -l something', which
in turn recommended that I run 'chcon -t bin_t /usr/share/drraw/drraw.cgi',
which fixed the issue (again, independently of whether the -selinux subpackage
was installed or not).

Digging through the selinux packaging wiki link from comment #1, I ended up at

http://www.redhat.com/archives/fedora-selinux-list/2006-April/msg00115.html

which seems to suggest that in your case a subpackage is unnecessary, and all
you really need is:

%post
chcon -t bin_t %{_datadir}/%{name}/drraw.cgi

and no need to worry about %postun at all. chcon is part of coreutils, so no
need to drag in policycoreutils (probably no need for a -selinux subpackage at
all).

Once your package gets accepted, file bug against selinux-policy and request
that your package be handled (again, as per the wiki page in comment #1)

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.