Re: [PATCH] libuser: Drop SELinux support.

While I am only an Ipfire user, I like to follow this list to keep up with its development. In that light, I am curious: why is Selinux support being dropped from some of the GNU utilities? Especially since Selinux is one of the best security tools in Linux.

Won't removal of Selinux support weaken security in Ipfire?

On Oct 29, 2016 6:47 AM, "Stefan Schantl" stefan.schantl@ipfire.org wrote:

Fixes #11211.

Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org

libuser/libuser.nm | 19 +++++++++++++------ 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/libuser/libuser.nm b/libuser/libuser.nm index c0751dc..709d5ea 100644 --- a/libuser/libuser.nm +++ b/libuser/libuser.nm @@ -5,7 +5,7 @@

name = libuser version = 0.62 -release = 1 +release = 2

groups = System/Libraries url = https://fedorahosted.org/libuser/ @@ -25,23 +25,30 @@ build requires cyrus-sasl-devel glib2-devel

•           libselinux-devel
            openldap-devel
            pam-devel
            pkg-config
            popt-devel
  

•           python-devel
  

•           python-devel >= 2.7.12-2
    end
  
  

•   export LD_LIBRARY_PATH = %{DIR_APP}/lib/.libs
  

•   configure_options += \
  

•           --sysconfdir=/etc \
  

•           --with-ldap \
  

•           --with-selinux
  

•           --with-ldap
  
    prepare_cmds
            # Little hack that we don't build documentation that
  

requires sgml2html sed -e "s/^SUBDIRS = .*/SUBDIRS = po/" -i Makefile.in end

•   test
  

•           # Disable tests which requires a running ldap server.
  

•           sed -e "s/tests\/default_pw_test//" -i Makefile
  

•           sed -e "s/tests\/ldap_test//" -i Makefile
  

•           make check
  

•   end
  

end

packages

2.7.4