IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-24 16:10:02 -06:00
Code Issues Packages Projects Releases Wiki Activity

Use copy when replacing files to keep SELinux context

Browse Source 
When installer replaces any file with newer, it must use 'copy' instead of
'mv' to keep SELinux context valid.

https://fedorahosted.org/freeipa/ticket/6111

Reviewed-By: Petr Spacek <pspacek@redhat.com>
This commit is contained in:
Martin Basti 2016-07-21 18:49:57 +02:00 committed by Martin Babinsky
parent bc7eb99a29
commit f8bf8a6240
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ipapython/ipautil.py
View File

@ -528,10 +528,14 @@ def dir_exists(filename):
except Exception: except Exception:
return False return False
def install_file(fname, dest): def install_file(fname, dest):
# SELinux: use copy to keep the right context
if file_exists(dest): if file_exists(dest):
os.rename(dest, dest + ".orig") os.rename(dest, dest + ".orig")
shutil.move(fname, dest) shutil.copy(fname, dest)
os.remove(fname)
def backup_file(fname): def backup_file(fname):
if file_exists(fname): if file_exists(fname):