[policycoreutils/f15] Do not drop capability bounding set in seunshare, this allows sandbox to run setuid apps. Cleanup po

Daniel J Walsh dwalsh at fedoraproject.org
Mon Jun 13 17:54:16 UTC 2011


commit 397914a5b702aa58c1881b88bd6803dd2aeecabd
Author: Dan Walsh <dwalsh at redhat.com>
Date:   Mon Jun 13 13:53:15 2011 -0400

    Do not drop capability bounding set in seunshare, this allows sandbox to
    run setuid apps.
    Cleanup policy generation template
    Pass dpi settings to sandbox
    Add .config/* to restorecond_users.conf

 policycoreutils.spec |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)
---
diff --git a/policycoreutils.spec b/policycoreutils.spec
index 02deed6..b5ef4e7 100644
--- a/policycoreutils.spec
+++ b/policycoreutils.spec
@@ -7,7 +7,7 @@
 Summary: SELinux policy core utilities
 Name:	 policycoreutils
 Version: 2.0.86
-Release: 8%{?dist}
+Release: 7.1%{?dist}
 License: GPLv2
 Group:	 System Environment/Base
 # Based on git repository with tag 20101221
@@ -26,7 +26,7 @@ Patch1:	 policycoreutils-po.patch
 Patch3:	 policycoreutils-gui.patch
 Patch4:	 policycoreutils-sepolgen.patch
 Patch5:	 policycoreutils-sandbox.patch
-Obsoletes: policycoreutils < 2.0.61-2
+Obsoletes: policycoreutils < 2.0.86-7
 
 %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")
 
@@ -300,6 +300,7 @@ rm -rf %{buildroot}
 Summary: SELinux restorecond utilities
 Group:	 System Environment/Base
 Requires(post): /sbin/chkconfig
+Obsoletes: policycoreutils < 2.0.86-7
 
 %description restorecond
 The policycoreutils-restorecond package contains the restorecond service.
@@ -333,11 +334,12 @@ fi
 exit 0
 
 %changelog
-* Mon Jun 13 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-8
+* Mon Jun 13 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-7.1
 - Do not drop capability bounding set in seunshare, this allows sandbox to 
 - run setuid apps.
 - Cleanup policy generation template
 - Pass dpi settings to sandbox
+- Add .config/* to restorecond_users.conf
 
 * Fri Apr 29 2011 Dan Walsh <dwalsh at redhat.com> 2.0.86-7
 - Clean up some of the templates for sepolgen


More information about the scm-commits mailing list