[SSSD] [PATCH] need to link sssd with libselinux (on Ubuntu Karmic)

Stephen Gallagher sgallagh at redhat.com
Tue Nov 3 20:26:36 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/03/2009 03:04 PM, Mathias Gug wrote:
> Hi,
> 
> On Tue, Nov 3, 2009 at 2:48 PM, Stephen Gallagher <sgallagh at redhat.com> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Actually, after a little bit of research, it appears that Ubuntu does
>> not support SELinux (in favor of AppArmor).
> 
> Selinux can be enabled in Ubuntu [1] - it's just not installed by default.
> 
> [1]: https://help.ubuntu.com/community/SELinux
> 
>> You almost certainly want to
>> be using the --without-selinux argument to configure.
>>
>> I just did a successful build with --without-selinux on Ubuntu 9.10. The
>> patch below was not required.
>>
> 
> The karmic control file doesn't list libselinux1-dev [2] as a build
> dependency. Could this be the root cause of the failed build?

Well, if SELinux isn't installed on Ubuntu by default (and would
conflict with a package that is) we don't want to make this a build
dependency.

> 
> [2]: http://packages.ubuntu.com/karmic/libselinux1-dev
> 
> We could enable selinux during the build process (by adding
> libselinux1-dev as a build dependency). Do the tools work correctly if
> the system is not configured with selinux (the default in Ubuntu)?
> 

The tools do not do any runtime detection of SELinux functionality. If
they are compiled with SELinux support, they will require it at runtime.
So if the default case on Ubuntu is not to have SELinux, then you need
to build with --without-selinux.


If you know of a way to perform runtime SELinux detection, I'm all ears.
- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkrwkfcACgkQeiVVYja6o6P9CwCdFUKLCaF6344jiVSEcZTboVb5
hD8An2gQUlDxkU+P+83DiK/N/tUozidy
=ujl1
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list