[freeipa/f18] Adjust Requires and BR for dogtag, 389-ds and selinux-policy

[rcritten]

commit e7f2213ee48157aa62aae9a0e90597359805869b
Author: Rob Crittenden <rcritten at redhat.com>
Date:   Thu Oct 25 16:34:35 2012 -0400

    Adjust Requires and BR for dogtag, 389-ds and selinux-policy
    
    - Set minimum Requires of selinux-policy to 3.11.1-43. It now owns
      pki-selinux policy.
    - Update Requires on dogtag to 10.0.0-0.46.b1 to pick up SELinux, logging
      and other fixes.
    - Add strict Requires for 389-ds-base and policycoreutils to avoid user
      removing them during package lifetime.
    - Drop unnecessary Requires on pki-symkey.
    - Add BR on checkpolicy.

 freeipa.spec |   28 +++++++++++++++++++---------
 1 files changed, 19 insertions(+), 9 deletions(-)
---
diff --git a/freeipa.spec b/freeipa.spec
index fae5567..8b0a16f 100644
--- a/freeipa.spec
+++ b/freeipa.spec
@@ -15,7 +15,7 @@ distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
 
 Name:           freeipa
 Version:        3.0.0
-Release:        2%{?dist}
+Release:        3%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 Group:          System Environment/Base
@@ -73,6 +73,7 @@ BuildRequires:  python-dns
 BuildRequires:  python-crypto
 BuildRequires:  check >= 0.9.5
 BuildRequires:  libsss_idmap-devel
+BuildRequires:  checkpolicy
 
 %description
 IPA is an integrated solution to provide centrally managed Identity (machine,
@@ -88,7 +89,7 @@ Requires: %{name}-python = %{version}-%{release}
 Requires: %{name}-client = %{version}-%{release}
 Requires: %{name}-admintools = %{version}-%{release}
 Requires: %{name}-server-selinux = %{version}-%{release}
-Requires(pre): 389-ds-base >= 1.3.0
+Requires: 389-ds-base >= 1.3.0
 Requires: openldap-clients
 Requires: nss
 Requires: nss-tools
@@ -110,14 +111,12 @@ Requires: python-memcached
 Requires: systemd-units >= 36-3
 Requires(pre): systemd-units
 Requires(post): systemd-units
-Requires: selinux-policy >= 3.11.1-33
+Requires: selinux-policy >= 3.11.1-43
 Requires(post): selinux-policy-base
 Requires: slapi-nis >= 0.40
-Requires: pki-ca >= pki-ca-10.0.0-0.43.b1
-Requires: pki-silent >= 10.0.0-0.43.b1
-Requires: pki-setup >= 10.0.0-0.43.b1
-# Temporary until dogtag adds their own requires: 09/21/12
-Requires: pki-symkey >= 10.0.0-0.43.a1
+Requires: pki-ca >= pki-ca-10.0.0-0.46.b1
+Requires: pki-silent >= 10.0.0-0.46.b1
+Requires: pki-setup >= 10.0.0-0.46.b1
 Requires: tomcat >= 7.0.29
 Requires: dogtag-pki-common-theme
 Requires: dogtag-pki-ca-theme
@@ -129,6 +128,7 @@ Requires(postun): python systemd-units
 Requires: python-dns
 Requires: keyutils
 Requires: zip
+Requires: policycoreutils >= %{POLICYCOREUTILSVER}
 
 # We have a soft-requires on bind. It is an optional part of
 # IPA but if it is configured we need a way to require versions
@@ -195,7 +195,7 @@ Requires(post): %{name}-server = %{version}-%{release}
 Requires(postun): %{name}-server = %{version}-%{release}
 
 # Specific requires
-Requires(pre): 389-ds-base = 1.3.0
+Requires: 389-ds-base = 1.3.0
 Requires: krb5-server = 1.10.3
 Requires: pki-ca = 10.0.0
 
@@ -744,6 +744,16 @@ fi
 %ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt
 
 %changelog
+* Thu Oct 24 2012 Rob Crittenden <rcritten at redhat.com> - 3.0.0-3
+- Set minimum Requires of selinux-policy to 3.11.1-43. It now owns
+  pki-selinux policy.
+- Update Requires on dogtag to 10.0.0-0.46.b1 to pick up SELinux, logging
+  and other fixes.
+- Add strict Requires for 389-ds-base and policycoreutils to avoid user
+  removing them during package lifetime.
+- Drop unnecessary Requires on pki-symkey.
+- Add BR on checkpolicy.
+
 * Fri Oct 12 2012 Rob Crittenden <rcritten at redhat.com> - 3.0.0-2
 - Configure CA replication to use TLS instead of SSL