[policycoreutils/f15] Do not drop capability bounding set in seunshare, this allows sandbox to run setuid apps. Cleanup po
Daniel J Walsh
dwalsh at fedoraproject.org
Mon Jun 13 17:54:16 UTC 2011
commit 397914a5b702aa58c1881b88bd6803dd2aeecabd
Author: Dan Walsh <dwalsh at redhat.com>
Date: Mon Jun 13 13:53:15 2011 -0400
Do not drop capability bounding set in seunshare, this allows sandbox to
run setuid apps.
Cleanup policy generation template
Pass dpi settings to sandbox
Add .config/* to restorecond_users.conf
policycoreutils.spec | 8 +++++---
1 files changed, 5 insertions(+), 3 deletions(-)
---
diff --git a/policycoreutils.spec b/policycoreutils.spec
index 02deed6..b5ef4e7 100644
--- a/policycoreutils.spec
+++ b/policycoreutils.spec
@@ -7,7 +7,7 @@
Summary: SELinux policy core utilities
Name: policycoreutils
Version: 2.0.86
-Release: 8%{?dist}
+Release: 7.1%{?dist}
License: GPLv2
Group: System Environment/Base
# Based on git repository with tag 20101221
@@ -26,7 +26,7 @@ Patch1: policycoreutils-po.patch
Patch3: policycoreutils-gui.patch
Patch4: policycoreutils-sepolgen.patch
Patch5: policycoreutils-sandbox.patch
-Obsoletes: policycoreutils < 2.0.61-2
+Obsoletes: policycoreutils < 2.0.86-7
%global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")
@@ -300,6 +300,7 @@ rm -rf %{buildroot}
Summary: SELinux restorecond utilities
Group: System Environment/Base
Requires(post): /sbin/chkconfig
+Obsoletes: policycoreutils < 2.0.86-7
%description restorecond
The policycoreutils-restorecond package contains the restorecond service.
@@ -333,11 +334,12 @@ fi
exit 0
%changelog
-* Mon Jun 13 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-8
+* Mon Jun 13 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-7.1
- Do not drop capability bounding set in seunshare, this allows sandbox to
- run setuid apps.
- Cleanup policy generation template
- Pass dpi settings to sandbox
+- Add .config/* to restorecond_users.conf
* Fri Apr 29 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-7
- Clean up some of the templates for sepolgen
More information about the scm-commits
mailing list