errors with labels after running for a while

Bill Nottingham notting at redhat.com
Mon Mar 15 14:40:52 UTC 2004


Russell Coker (russell at coker.com.au) said: 
> > > This is a serious problem.  How was the rndc.key file created?
> >
> > %post of bind.
> 
> Which program in the bind postinst does this?

postinstall scriptlet (using /bin/sh):
/sbin/chkconfig --add named
if [ -f etc/named.boot -a ! -f etc/named.conf ]; then
  if [ -x /usr/sbin/named-bootconf ]; then
    cat etc/named.boot | /usr/sbin/named-bootconf > etc/named.conf
    chmod 644 etc/named.conf
  fi
fi
if [ ! -e /etc/rndc.key.rpmnew ]; then
  sed -e "s/@KEY@/`/usr/sbin/dns-keygen`/" /etc/rndc.key >/etc/rndc.key.tmp
  mv -f /etc/rndc.key.tmp /etc/rndc.key
fi
chmod 0640 /etc/rndc.conf etc/rndc.key
chown root:named /etc/rndc.conf etc/rndc.key
/sbin/ldconfig
exit 0

sed & mv, actually.

Bill



More information about the fedora-selinux-list mailing list