IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-11 00:31:56 -06:00
Code Issues Packages Projects Releases Wiki Activity

replica promotion: fix AVC denials in remote connection check

Browse Source 
Also move com.redhat.idm.trust-fetch-domains to /usr/libexec/ipa/oddjob.

https://fedorahosted.org/freeipa/ticket/5550

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Jan Cholasta 2016-01-15 08:07:21 +01:00 committed by Martin Basti
parent 87ee451c7d
commit b3411dc985
2 changed files with 3 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
freeipa.spec.in
View File

@ -14,7 +14,7 @@
%global selinux_policy_version 3.12.1-153 %global selinux_policy_version 3.12.1-153
%else %else
%global samba_version 2:4.0.5-1 %global samba_version 2:4.0.5-1
%global selinux_policy_version 3.13.1-128.6 %global selinux_policy_version 3.13.1-158.4
%endif %endif
%define krb5_base_version %(LC_ALL=C rpm -q --qf '%%{VERSION}' krb5-devel | grep -Eo '^[^.]+\.[^.]+') %define krb5_base_version %(LC_ALL=C rpm -q --qf '%%{VERSION}' krb5-devel | grep -Eo '^[^.]+\.[^.]+')
@ -698,9 +698,6 @@ make client-install DESTDIR=%{buildroot}
mkdir -p %{buildroot}%{_usr}/share/ipa mkdir -p %{buildroot}%{_usr}/share/ipa
%if ! %{ONLY_CLIENT} %if ! %{ONLY_CLIENT}
# FIXME: https://bugzilla.redhat.com/show_bug.cgi?id=1289930
mv %{buildroot}%{_libexecdir}/ipa/oddjob/com.redhat.idm.trust-fetch-domains %{buildroot}%{_libexecdir}/ipa/com.redhat.idm.trust-fetch-domains
# Remove .la files from libtool - we don't want to package # Remove .la files from libtool - we don't want to package
# these files # these files
rm %{buildroot}/%{plugin_dir}/libipa_pwd_extop.la rm %{buildroot}/%{plugin_dir}/libipa_pwd_extop.la
@ -1224,7 +1221,7 @@ fi
%ghost %{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so %ghost %{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so
%{_sysconfdir}/dbus-1/system.d/oddjob-ipa-trust.conf %{_sysconfdir}/dbus-1/system.d/oddjob-ipa-trust.conf
%{_sysconfdir}/oddjobd.conf.d/oddjobd-ipa-trust.conf %{_sysconfdir}/oddjobd.conf.d/oddjobd-ipa-trust.conf
%%attr(755,root,root) %{_libexecdir}/ipa/com.redhat.idm.trust-fetch-domains %%attr(755,root,root) %{_libexecdir}/ipa/oddjob/com.redhat.idm.trust-fetch-domains
%endif # ONLY_CLIENT %endif # ONLY_CLIENT

2
install/oddjob/etc/oddjobd.conf.d/oddjobd-ipa-trust.conf
View File

@ -10,7 +10,7 @@
</interface> </interface>
<interface name="com.redhat.idm.trust"> <interface name="com.redhat.idm.trust">
<method name="fetch_domains"> <method name="fetch_domains">
<helper exec="/usr/libexec/ipa/com.redhat.idm.trust-fetch-domains" <helper exec="/usr/libexec/ipa/oddjob/com.redhat.idm.trust-fetch-domains"
arguments="1" arguments="1"
argument_passing_method="cmdline" argument_passing_method="cmdline"
prepend_user_name="no"/> prepend_user_name="no"/>