Ubuntu
policycoreutils package

shipping files in /share

Bug #418026 reported by Steve Langasek on 2009-08-24

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	policycoreutils (Ubuntu)	Fix Released	High	Caleb Case	Ubuntu karmic-alpha-6

Bug Description

Binary package hint: policycoreutils

$ dpkg -c ~/ubuntu/pool/universe/p/policycoreutils/policycoreutils_2.0.55-1ubuntu1_i386.deb |grep ' \./share'
drwxr-xr-x root/root 0 2009-05-11 00:17 ./share/
drwxr-xr-x root/root 0 2009-05-11 00:17 ./share/man/
drwxr-xr-x root/root 0 2009-05-11 00:17 ./share/man/man8/
-rw-r--r-- root/root 917 2009-05-11 00:17 ./share/man/man8/load_policy.8
$

This appears to be a consequence of the Ubuntu-specific modification to put load_policy in /sbin instead of /usr/sbin. The rationale for this move is bug #126415, but that bug states that the policy must be loaded in the initramfs - that has nothing to do with whether tools are located on /sbin or /usr/sbin on the installed system.

ProblemType: Bug
Architecture: amd64
Date: Mon Aug 24 00:56:26 2009
DistroRelease: Ubuntu 9.10
Package: policycoreutils (not installed)
ProcEnviron:
PATH=(custom, user)
LANG=en_US.UTF-8
SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-6.26-generic
SourcePackage: policycoreutils
Uname: Linux 2.6.31-6-generic x86_64

Tags:

Related branches

lp:ubuntu/lucid/policycoreutils

Steve Langasek (vorlon) on 2009-08-24

Changed in policycoreutils (Ubuntu):
importance:	Undecided → High
status:	New → Triaged

Revision history for this message

Caleb Case (calebcase) wrote on 2009-08-24:

Is this bug to move the man pages to /usr/share or to move the load_policy tool to /usr/sbin?

Revision history for this message

Steve Langasek (vorlon) wrote on 2009-08-24:

The bug is about moving the man pages to /usr/share. The easiest way to do that is to revert the Ubuntu delta that put load_policy to /sbin, and I can't see any reason not to do that.

Revision history for this message

Caleb Case (calebcase) wrote on 2009-08-24: Re: [Bug 418026] Re: shipping files in /share

load_policy is called from the initramfs to load the policy. At that
point /usr is not guaranteed to be mounted. That was why it was moved
to /sbin.

Revision history for this message

Steve Langasek (vorlon) wrote on 2009-08-24:

*Nothing* in the initramfs should be calling *anything* from the installed system. If you need load_policy in the initramfs, it should be *copied into the initramfs*.

See /usr/share/initramfs-tools/hooks/* for examples of this.

Kees Cook (kees) on 2009-08-25