Attachment 703935 Details for Bug 916727 – work-around with iptables change

[patch] work-around with iptables change

iptables-selinux-update.patch (text/plain), 3.29 KB, created by Tuomo Soini on 2013-02-28 19:19:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tuomo Soini

Created: 2013-02-28 19:19:53 UTC

Size: 3.29 KB

patch

obsolete

>diff --git a/iptables.spec b/iptables.spec
>index 1a9c7d5..bc31922 100644
>--- a/iptables.spec
>+++ b/iptables.spec
>@@ -1,5 +1,6 @@
> # Important for version updates: Fix virtual provides for base libaries
> 
>+%global minimum_selinux_policy_version 3.7.19-195
> Name: iptables
> Summary: Tools for managing Linux kernel packet filtering capabilities
> Version: 1.4.7
>@@ -22,6 +23,9 @@ BuildRequires: libselinux-devel
> BuildRequires: kernel-headers
> Conflicts: kernel < 2.4.20
> Requires: policycoreutils
>+Conflicts: selinux-policy-targeted < %{minimum_selinux_policy_version}
>+Conflicts: selinux-policy-mls < %{minimum_selinux_policy_version}
>+Conflicts: selinux-policy-minimum < %{minimum_selinux_policy_version}
> Requires(preun): %{_sbindir}/alternatives chkconfig
> Requires(post): %{_sbindir}/alternatives chkconfig
> Requires(postun): %{_sbindir}/alternatives
>@@ -43,6 +47,9 @@ Group: System Environment/Base
> Requires: %{name} = %{version}-%{release}
> Requires(post): chkconfig
> Requires(preun): chkconfig
>+Conflicts: selinux-policy-targeted < %{minimum_selinux_policy_version}
>+Conflicts: selinux-policy-mls < %{minimum_selinux_policy_version}
>+Conflicts: selinux-policy-minimum < %{minimum_selinux_policy_version}
> 
> %description ipv6
> The iptables package contains IPv6 (the next version of the IP
>@@ -191,6 +198,15 @@ if [ -z "$iptables" -o "$iptables" == "/sbin/iptables-%{version}" ]; then
>         %{_sbindir}/alternatives --set iptables.%{_arch} /sbin/iptables-%{version}
> fi
> 
>+%triggerpostun -- selinux-policy-targeted < %{minimum_selinux_policy_version}
>+[ -x /sbin/restorecon ] && /sbin/restorecon /sbin/iptables-multi-%{version} || :
>+
>+%triggerpostun -- selinux-policy-mls < %{minimum_selinux_policy_version}
>+[ -x /sbin/restorecon ] && /sbin/restorecon /sbin/iptables-multi-%{version} || :
>+
>+%triggerpostun -- selinux-policy-minimum < %{minimum_selinux_policy_version}
>+[ -x /sbin/restorecon ] && /sbin/restorecon /sbin/iptables-multi-%{version} || :
>+
> %post ipv6
> /sbin/chkconfig --add ip6tables
> %{_sbindir}/alternatives --install /sbin/ip6tables ip6tables.%{_arch} /sbin/ip6tables-%{version} 90 \
>@@ -223,6 +239,15 @@ if [ -z "$ip6tables" -o "$ip6tables" == "/sbin/ip6tables-%{version}" ]; then
>         %{_sbindir}/alternatives --set ip6tables.%{_arch} /sbin/ip6tables-%{version}
> fi
> 
>+%triggerpostun ipv6 -- selinux-policy-targeted < %{minimum_selinux_policy_version}
>+[ -x /sbin/restorecon ] && /sbin/restorecon /sbin/ip6tables-multi-%{version} || :
>+
>+%triggerpostun ipv6 -- selinux-policy-tls < %{minimum_selinux_policy_version}
>+[ -x /sbin/restorecon ] && /sbin/restorecon /sbin/ip6tables-multi-%{version} || :
>+
>+%triggerpostun ipv6 -- selinux-policy-minimum < %{minimum_selinux_policy_version}
>+[ -x /sbin/restorecon ] && /sbin/restorecon /sbin/ip6tables-multi-%{version} || :
>+
> %files
> %defattr(-,root,root)
> %doc COPYING INSTALL INCOMPATIBILITIES
>@@ -266,6 +291,10 @@ fi
> %{_libdir}/pkgconfig/xtables.pc
> 
> %changelog
>+* Thu Feb 28 2013 Tuomo Soini <tis@foobar.fi> - 1.4.7-9
>+- added Coflict for selinux-policy-targeted,mls,minimum < 3.7.19-195
>+- added %%triggerpostun scriptlets to fix iptables binary selinux contexts
>+
> * Wed Oct 31 2012 Thomas Woerner <twoerner@redhat.com> 1.4.7-9
> - make alternatives names arch dependant for multilib (rhbz#860148)
> - added virtual provides for base libraries to be able to resolve library file requires

Actions: View | Diff

Attachments on bug 916727: 703935 | 704153 | 704154