[xguest/f16] Make sure none of the gpk apps start on the desktop
Daniel J Walsh
dwalsh at fedoraproject.org
Fri Sep 23 12:51:41 UTC 2011
commit 6ead3d5bd9733c478ad2c9e1312e576a470a46c5
Author: Dan Walsh <dwalsh at redhat.com>
Date: Fri Sep 23 08:51:23 2011 -0400
Make sure none of the gpk apps start on the desktop
.gitignore | 1 +
sources | 2 +-
xguest.spec | 16 +++++++++++++---
3 files changed, 15 insertions(+), 4 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index 261e4db..f1c5430 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@ xguest-1.0.6.tar.bz2
xguest-1.0.7.tar.bz2
xguest-1.0.8.tar.bz2
/xguest-1.0.9.tar.bz2
+/xguest-1.0.10.tar.bz2
diff --git a/sources b/sources
index 1fad1cb..3ae7119 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-6641840c41c678cdc02aaa04a8bb91c2 xguest-1.0.9.tar.bz2
+073a1afac8780c361bf1a42d76c26437 xguest-1.0.10.tar.bz2
diff --git a/xguest.spec b/xguest.spec
index c4a8ebf..6a4cae6 100644
--- a/xguest.spec
+++ b/xguest.spec
@@ -1,7 +1,7 @@
Summary: Creates xguest user as a locked down user
Name: xguest
-Version: 1.0.9
-Release: 5%{?dist}
+Version: 1.0.10
+Release: 1%{?dist}
License: GPLv2+
Group: System Environment/Base
BuildArch: noarch
@@ -32,6 +32,7 @@ mounted on tmpfs.
%install
%{__rm} -fR %{buildroot}
%{__mkdir} -p %{buildroot}/%{_sysconfdir}/sabayon/profiles
+%{__mkdir} -p %{buildroot}/var/lib/xguest/home
%{__mkdir} -p %{buildroot}/%{_sysconfdir}/security/namespace.d/ls
install -m0644 xguest.zip %{buildroot}/%{_sysconfdir}/sabayon/profiles/
install -m0644 xguest.conf %{buildroot}/%{_sysconfdir}/security/namespace.d/
@@ -39,7 +40,8 @@ install -m0644 xguest.conf %{buildroot}/%{_sysconfdir}/security/namespace.d/
%pre
if [ $1 -eq 1 ]; then
semanage user -a -S targeted -P xguest -R xguest_r xguest_u 2> /dev/null || :
-(useradd -c "Guest" -Z xguest_u xguest || semanage login -a -S targeted -s xguest_u xguest || semanage login -m -S targeted -s xguest_u xguest) 2>/dev/null || exit 1
+mkdir -p /var/lib/xguest
+(useradd -c "Guest" -Z xguest_u -d /var/lib/xguest/home xguest || semanage login -a -S targeted -s xguest_u xguest || semanage login -m -S targeted -s xguest_u xguest) 2>/dev/null || exit 1
echo "xguest:exclusive" >> /etc/security/sepermit.conf
@@ -72,6 +74,8 @@ fi
%config(noreplace) %{_sysconfdir}/sabayon/profiles/xguest.zip
%{_sysconfdir}/security/namespace.d/
%doc README LICENSE
+/var/lib/xguest/home
+/var/lib/xguest
%preun
if [ $1 -eq 0 ]; then
@@ -86,6 +90,12 @@ __eof
fi
%changelog
+* Fri Sep 23 2011 Dan Walsh <dwalsh at redhat.com> - 1.0.10-1
+- Make sure none of the gpk apps start on the desktop
+
+* Tue Aug 2 2011 Dan Walsh <dwalsh at redhat.com> - 1.0.9-6
+- Change location of xguest home dir to /var/lib/xguest/home
+
* Wed Jun 15 2011 Dan Walsh <dwalsh at redhat.com> - 1.0.9-5
- Add requires for selinux-policy-targeted
More information about the scm-commits
mailing list