[policycoreutils] Remove mount -o bind calls from sandbox init script pam_namespace now has this built in.

Daniel J Walsh dwalsh at fedoraproject.org
Tue Jun 7 17:58:53 UTC 2011


commit 299d98087ecd9fd9d14e572076237dd703bf89b5
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Tue Jun 7 13:58:41 2011 -0400

    Remove mount -o bind calls from sandbox init script
    pam_namespace now has this built in.

 policycoreutils-rhat.patch |   18 +++++++++++++++++-
 policycoreutils.spec       |    6 +++++-
 2 files changed, 22 insertions(+), 2 deletions(-)
---
diff --git a/policycoreutils-rhat.patch b/policycoreutils-rhat.patch
index 59ccc3b..7906d75 100644
--- a/policycoreutils-rhat.patch
+++ b/policycoreutils-rhat.patch
@@ -2029,7 +2029,7 @@ index 0000000..ee97e10
 +This manual page was written by 
 +.I Thomas Liu <tliu at fedoraproject.org>
 diff --git a/policycoreutils/sandbox/sandbox.init b/policycoreutils/sandbox/sandbox.init
-index ff8b3ef..8508647 100644
+index ff8b3ef..66aadfd 100644
 --- a/policycoreutils/sandbox/sandbox.init
 +++ b/policycoreutils/sandbox/sandbox.init
 @@ -10,17 +10,12 @@
@@ -2056,6 +2056,22 @@ index ff8b3ef..8508647 100644
  #
  
  # Source function library.
+@@ -41,15 +36,6 @@ start() {
+ 
+ 	touch $LOCKFILE
+ 	mount --make-rshared / || return $? 
+-	mount --rbind /tmp /tmp || return $?
+-	mount --rbind /var/tmp /var/tmp || return $?
+-	mount --make-private /tmp || return $?
+-	mount --make-private /var/tmp || return $?
+-	for h in $HOMEDIRS; do
+-	    mount --rbind $h $h || return $?
+-	    mount --make-private $h || return $?
+-	done
+-
+ 	return 0
+ }
+ 
 diff --git a/policycoreutils/sandbox/sandboxX.sh b/policycoreutils/sandbox/sandboxX.sh
 index 8338203..9648100 100644
 --- a/policycoreutils/sandbox/sandboxX.sh
diff --git a/policycoreutils.spec b/policycoreutils.spec
index 385b695..afb5713 100644
--- a/policycoreutils.spec
+++ b/policycoreutils.spec
@@ -7,7 +7,7 @@
 Summary: SELinux policy core utilities
 Name:	 policycoreutils
 Version: 2.0.86
-Release: 11%{?dist}
+Release: 12%{?dist}
 License: GPLv2
 Group:	 System Environment/Base
 # Based on git repository with tag 20101221
@@ -331,6 +331,10 @@ fi
 exit 0
 
 %changelog
+* Tue Jun 7 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-12
+- Remove mount -o bind calls from sandbox init script
+- pam_namespace now has this built in.
+
 * Tue Jun 7 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-11
 - Pass desktop dpi to sandbox Xephyr window
 


More information about the scm-commits mailing list