mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-28 01:41:14 -06:00
e881e35783
Require OpenDNSSEC 2.1.6-5 with fix for RHBZ#1825812 (DAC override AVC) Allow ipa-dnskeysyncd to connect to enforcer.sock (ipa_dnskey_t write opendnssec_var_run_t and connectto opendnssec_t). The opendnssec_stream_connect interface is available since 2016. Change the owner of the ipa-ods-exporter socket to ODS_USER:ODS_GROUP. The ipa-ods-exporter service already runs as ODS_USER. Fixes: https://pagure.io/freeipa/issue/8283 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
47 lines
1.1 KiB
Makefile
47 lines
1.1 KiB
Makefile
# This file will be processed with automake-1.7 to create Makefile.in
|
|
#
|
|
AUTOMAKE_OPTIONS = 1.7
|
|
|
|
appdir = $(libexecdir)/ipa/
|
|
nodist_app_SCRIPTS = \
|
|
ipa-dnskeysyncd \
|
|
ipa-dnskeysync-replica \
|
|
ipa-ods-exporter
|
|
|
|
dist_noinst_DATA = \
|
|
ipa-dnskeysyncd.service.in \
|
|
ipa-ods-exporter.service.in \
|
|
ipa-ods-exporter.socket.in \
|
|
ipa-dnskeysyncd.in \
|
|
ipa-dnskeysync-replica.in \
|
|
ipa-ods-exporter.in
|
|
|
|
|
|
systemdsystemunit_DATA = \
|
|
ipa-dnskeysyncd.service \
|
|
ipa-ods-exporter.service \
|
|
ipa-ods-exporter.socket
|
|
|
|
CLEANFILES = $(systemdsystemunit_DATA) $(nodist_app_SCRIPTS)
|
|
|
|
%: %.in Makefile
|
|
sed \
|
|
-e 's|@libexecdir[@]|$(libexecdir)|g' \
|
|
-e 's|@localstatedir[@]|$(localstatedir)|g' \
|
|
-e 's|@sysconfenvdir[@]|$(sysconfenvdir)|g' \
|
|
-e 's|@runstatedir[@]|$(runstatedir)|g' \
|
|
-e 's|@ODS_USER[@]|$(ODS_USER)|g' \
|
|
-e 's|@ODS_GROUP[@]|$(ODS_GROUP)|g' \
|
|
-e 's|@NAMED_GROUP[@]|$(NAMED_GROUP)|g' \
|
|
'$(srcdir)/$@.in' >$@
|
|
|
|
dnssecconfdir = $(IPA_SYSCONF_DIR)/dnssec
|
|
install-data-hook:
|
|
$(INSTALL) -d -m 755 $(DESTDIR)$(dnssecconfdir)
|
|
|
|
PYTHON_SHEBANG = \
|
|
$(nodist_app_SCRIPTS) \
|
|
$(NULL)
|
|
|
|
include $(top_srcdir)/Makefile.pythonscripts.am
|