selinux: load_policy script fix

chroot load_policy will use selinuxfs which should be mounted
in $NEWROOT/sys/fs/selinux for Fedora 19, but because there's
no $NEWROOT/sys/fs, so later process will fail.

Fixing this by bind mount /sys to $NEWROOT/sys.

Signed-off-by: Dave Young <dyoung@redhat.com>
master
dyoung@redhat.com 2013-05-30 14:19:00 +08:00 committed by Harald Hoyer
parent bc97e005fa
commit cf8b1b7853
1 changed files with 4 additions and 1 deletions

View File

@ -24,7 +24,8 @@ rd_load_policy()
local ret=0
local out
info "Loading SELinux policy"
# load_policy does mount /proc and /selinux in
mount -o bind /sys $NEWROOT/sys
# load_policy does mount /proc and /sys/fs/selinux in
# libselinux,selinux_init_load_policy()
if [ -x "$NEWROOT/sbin/load_policy" ]; then
out=$(LANG=C chroot "$NEWROOT" /sbin/load_policy -i 2>&1)
@ -35,6 +36,8 @@ rd_load_policy()
ret=$?
info $out
fi
umount $NEWROOT/sys/fs/selinux
umount $NEWROOT/sys

if [ "$SELINUX" = "disabled" ]; then
return 0;