URL: https://github.com/freeipa/freeipa/pull/414
Author: lslebodn
Title: #414: SPEC: Update SELinux file context of ipa-otpd
Action: opened
PR body:
"""
The ipa-otpd binary was moved but SELinux was not updated.
This is a workaround for developers who develop on platforms
with older SELinux policy.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/414/head:pr414
git checkout pr414
From c41e4d7ca48d32661a9acc24a02ef7868f711705 Mon Sep 17 00:00:00 2001
From: Lukas Slebodnik <lsleb...@redhat.com>
Date: Sat, 28 Jan 2017 10:25:39 +0100
Subject: [PATCH] SPEC: Update SELinux file context of ipa-otpd
The ipa-otpd binary was moved but SELinux was not updated.
This is a workaround for developers who develop on platforms
with older SELinux policy.
---
freeipa.spec.in | 3 +++
1 file changed, 3 insertions(+)
diff --git a/freeipa.spec.in b/freeipa.spec.in
index a7e05f3..b044e2f 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -243,6 +243,7 @@ Requires(pre): systemd-units
Requires(post): systemd-units
Requires: selinux-policy >= %{selinux_policy_version}
Requires(post): selinux-policy-base >= %{selinux_policy_version}
+Requires(post): coreutils
Requires: slapi-nis >= %{slapi_nis_version}
Requires: pki-ca >= 10.3.5-6
Requires: pki-kra >= 10.3.5-6
@@ -933,6 +934,8 @@ fi
/bin/systemctl reload-or-try-restart dbus
/bin/systemctl reload-or-try-restart oddjobd
+%post server
+chcon system_u:object_r:ipa_otpd_exec_t:s0 /usr/libexec/ipa/ipa-otpd
%posttrans server
# don't execute upgrade and restart of IPA when server is not installed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
