Attachment 1445754 Details for Bug 1580389 – Remove setsebool toggling, depend on bind doing it

[patch] Remove setsebool toggling, depend on bind doing it

0001-Move-selinux-policy-handling-to-bind-depend-on-versi.patch (text/plain), 2.34 KB, created by Petr Menšík on 2018-05-30 10:18:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Petr Menšík

Created: 2018-05-30 10:18:51 UTC

Size: 2.34 KB

patch

obsolete

>From 413bb17fb7e162a0da567e44a785509d538e80a1 Mon Sep 17 00:00:00 2001
>From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= <pemensik@redhat.com>
>Date: Mon, 28 May 2018 22:43:01 +0200
>Subject: [PATCH] Move selinux policy handling to bind, depend on version with
> writeable home.
>
>Resolves: #1580389
>---
> bind-dyndb-ldap.spec | 27 +++++----------------------
> 1 file changed, 5 insertions(+), 22 deletions(-)
>
>diff --git a/bind-dyndb-ldap.spec b/bind-dyndb-ldap.spec
>index 1f12fa5..794bb0e 100644
>--- a/bind-dyndb-ldap.spec
>+++ b/bind-dyndb-ldap.spec
>@@ -2,7 +2,7 @@
> 
> Name:           bind-dyndb-ldap
> Version:        11.1
>-Release:        4%{?dist}
>+Release:        5%{?dist}
> Summary:        LDAP back-end plug-in for BIND
> 
> Group:          System Environment/Libraries
>@@ -27,9 +27,8 @@ BuildRequires:  openldap-devel
> BuildRequires:  libuuid-devel
> BuildRequires:  automake, autoconf, libtool
> 
>-Requires:       bind >= 32:9.9.4-51
>+Requires:       bind >= 32:9.9.4-63
> # https://bugzilla.redhat.com/show_bug.cgi?id=1376851
>-Requires(post,postun): selinux-policy
> Requires(post):  sed
> 
> %description
>@@ -66,16 +65,6 @@ rm -r %{buildroot}%{_datadir}/doc/%{name}
> 
> 
> %post
>-# SELinux boolean named_write_master_zones has to be enabled
>-# otherwise the plugin will not be able to write to /var/named.
>-# This scriptlet enables the boolean after installation or upgrade.
>-# SELinux is sensitive area so I want to inform user about the change.
>-if [ -x "/usr/sbin/setsebool" ] ; then
>-        echo "Enabling SELinux boolean named_write_master_zones"
>-        /usr/sbin/setsebool -P named_write_master_zones=1 || :
>-fi
>-
>-
> # Transform named.conf if it still has old-style API.
> PLATFORM=$(uname -m) 
> 
>@@ -115,15 +104,6 @@ EOF
> 
> sed -i.bak -e "$SEDSCRIPT" /etc/named.conf
> 
>-
>-# This scriptlet disables the boolean after uninstallation.
>-%postun
>-if [ "0$1" -eq "0" ] && [ -x "/usr/sbin/setsebool" ] ; then
>-        echo "Disabling SELinux boolean named_write_master_zones"
>-        /usr/sbin/setsebool -P named_write_master_zones=0 || :
>-fi
>-
>-
> %clean
> rm -rf %{buildroot}
> 
>@@ -136,6 +116,9 @@ rm -rf %{buildroot}
> 
> 
> %changelog
>+* Mon May 28 2018 Petr MenÅ¡Ãk <pemensik@redhat.com> - 11.1-5
>+- Resolves: #1580389 depend on bind with writeable home
>+
> * Wed Jul 12 2017 Tomas Krizek <tkrizek@redhat.com> - 11.1-4
> - Resolves: #1469563 required bind version doesn't have the dyndb interface
> 
>-- 
>2.14.3
>

Actions: View | Diff

Attachments on bug 1580389: 1445754