• Xin Ouyang's avatar
    busybox: alternatives link to sh wrappers for commands · 521ca9c9
    Xin Ouyang authored
    
    
    While directly using busybox[.[no]suid] as the alternatives'
    targets, commands could not get correct security labels.
    
     ~# ls -l /sbin/getty
     ..... /sbin/getty -> /bin/busybox.nosuid
     ~# ls -Z /bin/busybox.nosuid
     system_u:object_r:bin_t:s0 /bin/busybox.nosuid
    
    Add sh wrappers for commands so selinux could work fine.
    
     ~# ls -l /sbin/getty
     ..... /sbin/getty -> /usr/lib/busybox/sbin/getty
     ~# ls -Z /usr/lib/busybox/sbin/getty
     system_u:object_r:getty_exec_t:s0 /usr/lib/busybox/sbin/getty
     ~# cat /usr/lib/busybox/sbin/getty
     #!/bin/busybox.nosuid
    Signed-off-by: default avatarXin Ouyang <Xin.Ouyang@windriver.com>
    Signed-off-by: default avatarJoe MacDonald <joe@deserted.net>
    521ca9c9