Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Red Hat init script produces spurious restorecon warning at startup

Description

With SSPCPP-35, the following snippet was added to the Red Hat init script:

if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then /sbin/restorecon $pidfile fi

(see https://svn.shibboleth.net/view/cpp-sp?view=revision&revision=2458)

This currently leads to the following init script output on RHEL/CentOS:

Starting shibd: /sbin/restorecon: Warning no default label for /var/run/shibboleth/shibd.pid [ OK ]

The SP 2.x doesn't include a usable SELinux policy module, AFAICT (selinux/shibshar.* looks like 1.x stuff), so my conclusion is that the restorecon call in the Red Hat init script is pointless as of today (and should therefore be removed).

Environment

None

Activity

Show:

Scott Cantor December 2, 2013 at 5:06 PM

Closing on release.

Scott Cantor November 20, 2013 at 10:54 PM

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Created September 17, 2013 at 6:27 AM
Updated December 2, 2013 at 5:06 PM
Resolved November 20, 2013 at 10:54 PM