From 4a6ecd2856ad9f8d4ff3f0f90df66150a62d15fc474af6b953bbc5eb4b90a240 Mon Sep 17 00:00:00 2001 From: Johannes Segitz Date: Mon, 3 Jun 2019 14:23:38 +0000 Subject: [PATCH] Accepting request 707195 from home:jsegitz:branches:security:SELinux - In selinux-ready * Removed check for selinux-policy package as we don't ship one (bsc#1136845) * Add check that restorecond is installed and enabled OBS-URL: https://build.opensuse.org/request/show/707195 OBS-URL: https://build.opensuse.org/package/show/security:SELinux/libselinux?expand=0&rev=113 --- libselinux.changes | 8 ++++++++ selinux-ready | 6 +++--- 2 files changed, 11 insertions(+), 3 deletions(-) diff --git a/libselinux.changes b/libselinux.changes index d40e25a..1344f93 100644 --- a/libselinux.changes +++ b/libselinux.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Mon Jun 3 09:34:17 UTC 2019 - + +- In selinux-ready + * Removed check for selinux-policy package as we don't ship one + (bsc#1136845) + * Add check that restorecond is installed and enabled + ------------------------------------------------------------------- Fri May 24 11:22:19 UTC 2019 - diff --git a/selinux-ready b/selinux-ready index 163489b..7700339 100644 --- a/selinux-ready +++ b/selinux-ready @@ -196,17 +196,17 @@ check_initupstart() check_runlevel() { - if [ "$(systemctl is-enabled restorecond.service)" == "enabled" ]; then + if [ "$(systemctl is-enabled restorecond.service 2>/dev/null)" == "enabled" ]; then printf "\tcheck_runlevel: OK. restorecond is enabled on your system\n" return 0; fi - printf "\tcheck_runlevel: ERR. please execute 'yast2 runlevel' and enable restorecond.\n" + printf "\tcheck_runlevel: ERR. please enable restorecond with systemctl enable restorecond.service.\n" return 1 } check_packages() { - PKGLST="checkpolicy policycoreutils selinux-tools libselinux1 libsepol1 libsemanage1 selinux-policy" + PKGLST="checkpolicy policycoreutils selinux-tools libselinux1 libsepol1 libsemanage1 restorecond" FAIL=0 for i in $PKGLST