[systemd] Revert "don't reset selinux context during CHANGE events"
Kay Sievers
kay at fedoraproject.org
Wed Oct 1 18:15:02 UTC 2014
commit 5cdc00d6e61463d81479ea444c93c40060605f76
Author: Kay Sievers <kay at vrfy.org>
Date: Wed Oct 1 20:07:58 2014 +0200
Revert "don't reset selinux context during CHANGE events"
This reverts commit 9a5afe8dab79b3031f5448517b76bf16f0b0779a.
We must not diconnect selinux label application from udev's primary
device node permission handling. They are all applied by udev at
the same time or not applied at all.
External tools which mangle device node permissions must not
install rules to instruct udev to manage the permissions, they
can *own* the device nodes but need to call chmod()/chown()
themselves.
...-default-selinux-label-only-at-add-events.patch | 25 --------------------
systemd.spec | 8 +++---
2 files changed, 4 insertions(+), 29 deletions(-)
---
diff --git a/systemd.spec b/systemd.spec
index a6909ea..3fbaa58 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -16,7 +16,7 @@
Name: systemd
Url: http://www.freedesktop.org/wiki/Software/systemd
Version: 216
-Release: 7%{?gitcommit:.git%{gitcommit}}%{?dist}
+Release: 8%{?gitcommit:.git%{gitcommit}}%{?dist}
# For a breakdown of the licensing, see README
License: LGPLv2+ and MIT and GPLv2+
Summary: A System and Service Manager
@@ -58,9 +58,6 @@ Patch0011: 0011-Revert-timesyncd-remove-retry_timer-logic-which-is-c.patch
# kernel-install patch for grubby, drop if grubby is obsolete
Patch1000: kernel-install-grubby.patch
-# temporary workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1147910
-Patch1001: 0001-udev-set-default-selinux-label-only-at-add-events.patch
-
%global num_patches %{lua: c=0; for i,p in ipairs(patches) do c=c+1; end; print(c);}
BuildRequires: libcap-devel
@@ -817,6 +814,9 @@ getent passwd systemd-journal-upload >/dev/null 2>&1 || useradd -r -l -g systemd
%{_datadir}/systemd/gatewayd
%changelog
+* Wed Oct 01 2014 Kay Sievers <kay at redhat.com> - 216-8
+- revert "don't reset selinux context during CHANGE events"
+
* Wed Oct 01 2014 Lukáš Nykrýn <lnykryn at redhat.com> - 216-7
- add temporary workaround for #1147910
- don't reset selinux context during CHANGE events
More information about the scm-commits
mailing list