Bug 1373297 – openssh can't be installed without selinux-policy

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1373297 - openssh can't be installed without selinux-policy

Summary:	openssh can't be installed without selinux-policy

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	openssh (Show other bugs)
Sub Component:
Version:	7.3
Hardware:	All Linux

Priority	unspecified Severity high
Target Milestone:	rc
Target Release:	7.3
Assigned To:	Jakub Jelen
QA Contact:	Stanislav Zidek
Docs Contact:

URL:
Whiteboard:
Keywords:	Regression

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2016-09-05 17:34 EDT by Petr Lautrbach
Modified:	2016-11-03 16:20 EDT (History)
CC List:	4 users (show)

See Also:
Fixed In Version:	openssh-6.6.1p1-31.el7
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2016-11-03 16:20:42 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2016:2588	normal	SHIPPED_LIVE	Moderate: openssh security, bug fix, and enhancement update	2016-11-03 08:09:45 EDT

Groups: None (edit)

Description Petr Lautrbach 2016-09-05 17:34:18 EDT

Description of problem:

Since 6.6.1p1-29.el7 release, openssh can't be installed without selinux-policy. This is a regression against rhel-7.2 where openssh package doesn't require selinux-policy at all.

The problem is in this patch:

 %if %{WITH_SELINUX}
+Requires: selinux-policy >= 3.13.1-92
 Requires: libselinux >= 1.27.7

Given that openssh is always compiled with SELinux support, it brings a hard requirement on selinux-policy. However, openssh can be used without SELinux and selinux-policy. I believe that the correct change would be:


 %if %{WITH_SELINUX}
-Requires: selinux-policy >= 3.13.1-92
+Conflicts: selinux-policy < 3.13.1-92
 Requires: libselinux >= 1.27.7

Comment 4 Jakub Jelen 2016-09-06 05:23:47 EDT

Related Fedora Packaging Guidelines (that I missed) for future reference:
https://fedoraproject.org/wiki/Packaging:Conflicts#Optional_Functionality

Comment 9 errata-xmlrpc 2016-11-03 16:20:42 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2016-2588.html

Note You need to log in before you can comment on or make changes to this bug.