[krb5] - correct a bug in the fix for #754001 so that the file creation context is consistently reset

Nalin Dahyabhai nalin at fedoraproject.org
Wed Nov 30 20:07:01 UTC 2011


commit 635a422817d3906709964c724865adfd8701f5bd
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Wed Nov 30 15:03:45 2011 -0500

    - correct a bug in the fix for #754001 so that the file creation context is consistently reset

 krb5-1.10-selinux-label.patch |    6 ++----
 krb5.spec                     |    6 +++++-
 2 files changed, 7 insertions(+), 5 deletions(-)
---
diff --git a/krb5-1.10-selinux-label.patch b/krb5-1.10-selinux-label.patch
index 8f46166..6355a05 100644
--- a/krb5-1.10-selinux-label.patch
+++ b/krb5-1.10-selinux-label.patch
@@ -465,7 +465,7 @@ which we used earlier, is some improvement.
  
 --- krb5/src/util/support/selinux.c
 +++ krb5/src/util/support/selinux.c
-@@ -0,0 +1,374 @@
+@@ -0,0 +1,372 @@
 +/*
 + * Copyright 2007,2008,2009,2011 Red Hat, Inc.  All Rights Reserved.
 + *
@@ -706,9 +706,7 @@ which we used earlier, is some improvement.
 +krb5int_pop_fscreatecon(void *con)
 +{
 +	if (con != NULL) {
-+		if (con != (void *) -1) {
-+			pop_fscreatecon(con);
-+		}
++		pop_fscreatecon((con == (void *) -1) ? NULL : con);
 +		k5_mutex_unlock(&labeled_mutex);
 +	}
 +}
diff --git a/krb5.spec b/krb5.spec
index 24ed5a7..e1f00b8 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -15,7 +15,7 @@
 Summary: The Kerberos network authentication system
 Name: krb5
 Version: 1.10
-Release: 0%{?dist}.alpha1.0
+Release: 0%{?dist}.alpha1.0.1
 # Maybe we should explode from the now-available-to-everybody tarball instead?
 # http://web.mit.edu/kerberos/dist/krb5/1.10/krb5-1.10-alpha1-signed.tar
 Source0: krb5-%{version}-alpha1.tar.gz
@@ -737,6 +737,10 @@ exit 0
 %{_sbindir}/uuserver
 
 %changelog
+* Wed Nov 30 2011 Nalin Dahyabhai <nalin at redhat.com> 1.10-0.alpha1.1
+- correct a bug in the fix for #754001 so that the file creation context is
+  consistently reset
+
 * Tue Nov 15 2011 Nalin Dahyabhai <nalin at redhat.com> 1.10-0.alpha1.0
 - update to 1.10 alpha 1
 - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build


More information about the scm-commits mailing list