Re: make check issues with attr and acl builds on lfs 12.3

"Xi Ruoyao" ([email protected] via lfs-support Mailing List) <[email protected]> Thu, 20 Mar 2025 13:47:52 +0800
Newsgroups gmane.linux.lfs.support
Message-ID <[email protected]>
On Wed, 2025-03-19 at 23:07 -0500, brian naasz wrote:
> People, 
> 
> I am building LFS on a Fedora 41 VM, in permissive mode, and hit a weird SeLinux
>  complication with the 'make check' stage for both the 'attr-2.5.2' and 'acl-2.3.2' packages.
> 
> To prevent somebody from spending a few hours running down rabbit holes like I did 
> here is what is wrong and what I believe the fix is.
> 
> The test scripts for the two packages assume they are the _only_ creator of attribute
> namespaces for their files and start generating false errors when the
> 'security.selinux="...."` lines appear. 
> 
> It boils down to the scripts running:
> 
>     getfattr -m- -RLhd .
> 
> when they should be checking only for the namespace(s) they set::
> 
>     getfattr -m '^(user|trusted).test' -RLhd .
> 
> Simple fix really.

Hmm the IIUC your report means building LFS on F41 will cause *every*
files in the LFS system to have "security.selinux" extended attributes?
Then it'd be a serious issue and we'd need to prevent it from happening,
instead of just covering it up.

-- 
Xi Ruoyao <[email protected]>
School of Aerospace Science and Technology, Xidian University

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-support
Unsubscribe: See the above information page