gh-145417: Do not preserve SELinux context when copying venv scripts

Lib/test/test_venv.py

@@ -11,12 +11,13 @@
 import os.path
 import pathlib
 import re
+import shlex
 import shutil
 import subprocess
 import sys
 import sysconfig
 import tempfile
-import shlex
+import time
 from test.support import (captured_stdout, captured_stderr,
                           skip_if_broken_multiprocessing_synchronize, verbose,
                           requires_subprocess, is_android, is_apple_mobile,
@@ -373,6 +374,15 @@
             with open(fn, 'wb') as f:
                 f.write(b'Still here?')
 
+    def test_install_scripts_selinux(self):
+    """
+    gh-145417: Test that install_scripts does not copy SELinux context when
+    copying scripts.
+    """
+    with patch('os.listxattr') as listxattr_mock:
+        venv.create(self.env_dir)
+    listxattr_mock.assert_not_called()
+
     def test_overwrite_existing(self):
         """
         Test creating environment in an existing directory.

Lib/venv/__init__.py

@@ -581,7 +581,7 @@ def skip_file(f):
                                    'may be binary: %s', srcfile, e)
                     continue
                 if new_data == data:
-                    shutil.copy2(srcfile, dstfile)
+                    shutil.copy(srcfile, dstfile)
                 else:
                     with open(dstfile, 'wb') as f:
                         f.write(new_data)

Misc/NEWS.d/next/Library/2026-03-03-11-49-44.gh-issue-145417.m_HxIL.rst

@@ -0,0 +1 @@
+Prevent incorrect preservation of SELinux context when copying scripts in :mod:`venv`.