[pam_ssh] Use tmpfiles.d for /var/run

Dmitry Butskoy buc at fedoraproject.org
Mon Oct 3 15:44:35 UTC 2011


commit b8b5016c5ce7dc90a623ddb6828d3cf0d5852a0b
Author: Dmitry Butskoy <Dmitry at Butskoy.name>
Date:   Mon Oct 3 19:43:59 2011 +0400

    Use tmpfiles.d for /var/run

 pam_ssh.spec |   15 ++++++++++++---
 1 files changed, 12 insertions(+), 3 deletions(-)
---
diff --git a/pam_ssh.spec b/pam_ssh.spec
index 811e215..8595d21 100644
--- a/pam_ssh.spec
+++ b/pam_ssh.spec
@@ -1,7 +1,7 @@
 Summary: PAM module for use with SSH keys and ssh-agent
 Name: pam_ssh
 Version: 1.97
-Release: 7%{?dist}
+Release: 8%{?dist}
 Group: System Environment/Base
 License: BSD
 URL: http://sourceforge.net/projects/pam-ssh/
@@ -53,10 +53,15 @@ make %{?_smp_mflags} LDFLAGS='-export-symbols pam_ssh.sym'
 rm -rf $RPM_BUILD_ROOT
 make install DESTDIR=$RPM_BUILD_ROOT INSTALL="install -p"
 
-install -d -m 755 $RPM_BUILD_ROOT%{_localstatedir}/run/pam_ssh
-
 rm -f $RPM_BUILD_ROOT/%{_lib}/security/*.la
 
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/tmpfiles.d
+cat <<EOF >$RPM_BUILD_ROOT%{_sysconfdir}/tmpfiles.d/%{name}.conf
+D %{_localstatedir}/run/pam_ssh 0755 root root -
+EOF
+
+install -d -m 755 $RPM_BUILD_ROOT%{_localstatedir}/run/pam_ssh
+
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -66,11 +71,15 @@ rm -rf $RPM_BUILD_ROOT
 %defattr(-,root,root,-)
 /%{_lib}/security/*.so
 %ghost %dir %{_localstatedir}/run/pam_ssh
+%config(noreplace) %{_sysconfdir}/tmpfiles.d/%{name}.conf
 %doc AUTHORS NEWS README ChangeLog TODO COPYING
 %{_mandir}/*/*
 
 
 %changelog
+* Mon Oct  3 2011 Dmitry Butskoy <Dmitry at Butskoy.name> - 1.97-8
+- Use tmpfiles.d for /var/run pre-creation to avoid SELinux issues (#742274)
+
 * Tue Jun  7 2011 Dmitry Butskoy <Dmitry at Butskoy.name> - 1.97-7
 - Drop root group privileges properly before executing ssh-agent (#711170)
 


More information about the scm-commits mailing list