Require new selinux-policy replacing old server-selinux subpackage

Features of the new policy:
- labels /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t which is
  writeable by PKI and readable by HTTPD
- contains Conflicts with old freeipa-server-selinux package to avoid
  SELinux upgrade issues

https://fedorahosted.org/freeipa/ticket/3788
This commit is contained in:
Martin Kosek
2013-07-17 16:21:14 +02:00
parent b5d008ed5a
commit 1dcbb3adfa

View File

@@ -130,7 +130,7 @@ Requires: python-memcached
Requires: systemd-units >= 38 Requires: systemd-units >= 38
Requires(pre): systemd-units Requires(pre): systemd-units
Requires(post): systemd-units Requires(post): systemd-units
Requires: selinux-policy >= 3.11.1-86 Requires: selinux-policy >= 3.12.1-65
Requires(post): selinux-policy-base Requires(post): selinux-policy-base
Requires: slapi-nis >= 0.44 Requires: slapi-nis >= 0.44
Requires: pki-ca >= 10.0.2 Requires: pki-ca >= 10.0.2
@@ -825,6 +825,10 @@ fi
%endif # ! %{ONLY_CLIENT} %endif # ! %{ONLY_CLIENT}
%changelog %changelog
* Wed Jul 17 2013 Martin Kosek <mkosek@redhat.com> - 3.2.99-7
- Require selinux-policy 3.12.1-65 containing missing policy after removal of
freeipa-server-selinux subpackage
* Tue Jul 16 2013 Tomas Babej <tbabej@redhat.com> - 3.2.99-6 * Tue Jul 16 2013 Tomas Babej <tbabej@redhat.com> - 3.2.99-6
- Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost