From 58d1f877a2337cdfa96a862eadb933da0dffdd35 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Sat, 27 Feb 2010 20:40:41 +0000 Subject: DEP-3 tagging of autotools, SELinux, key blacklisting, and keepalive patches --- debian/patches/selinux-fix-chroot-directory.patch | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'debian/patches/selinux-fix-chroot-directory.patch') diff --git a/debian/patches/selinux-fix-chroot-directory.patch b/debian/patches/selinux-fix-chroot-directory.patch index a69ded59b..5c7c3c4a9 100644 --- a/debian/patches/selinux-fix-chroot-directory.patch +++ b/debian/patches/selinux-fix-chroot-directory.patch @@ -1,3 +1,12 @@ +Description: Make ChrootDirectory work with SELinux + After chroot() is called the SE Linux context setting won't work unless + /selinux and /proc are mounted in the chroot environment. Even worse, if + the user has control over the chroot environment then they may be able to + control the context that they get (I haven't verified this). +Author: Russell Coker +Bug-Debian: http://bugs.debian.org/556644 +Last-Update: 2010-02-27 + Index: b/session.c =================================================================== --- a/session.c -- cgit v1.2.3