Alon Bar-Lev has uploaded a new change for review.

Change subject: packagers: miniyum: we only need system_r
......................................................................

packagers: miniyum: we only need system_r

rpm_t type is added automatically by the rpm_execcon(),
question is why the system_r is not added...
the rpm_t conflict with other tasks install should do
such as interactive with dbus.

Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=904153
Change-Id: Iebc0c3fb20c5720a5e05ba0cfda8931ab80a152a
Signed-off-by: Alon Bar-Lev <[email protected]>
---
M src/plugins/otopi/packagers/miniyum.py
1 file changed, 1 insertion(+), 9 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/otopi refs/changes/97/12797/1

diff --git a/src/plugins/otopi/packagers/miniyum.py 
b/src/plugins/otopi/packagers/miniyum.py
index f8f8863..e272004 100755
--- a/src/plugins/otopi/packagers/miniyum.py
+++ b/src/plugins/otopi/packagers/miniyum.py
@@ -557,18 +557,10 @@
             ctx1 = selinux.context_new(ctx)
             if not ctx1:
                 raise Exception(_('Cannot create selinux context'))
-            if selinux.context_type_get(ctx1) != 'rpm_t':
-                if selinux.context_type_set(ctx1, 'rpm_t') != 0:
-                    raise Exception(
-                        _('Cannot set type within selinux context')
-                    )
+            if selinux.context_role_get(ctx1) != 'system_r':
                 if selinux.context_role_set(ctx1, 'system_r') != 0:
                     raise Exception(
                         _('Cannot set role within selinux context')
-                    )
-                if selinux.context_user_set(ctx1, 'unconfined_u') != 0:
-                    raise Exception(
-                        _('Cannot set user within selinux context')
                     )
                 if selinux.setexeccon(selinux.context_str(ctx1)) != 0:
                     raise Exception(


--
To view, visit http://gerrit.ovirt.org/12797
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Iebc0c3fb20c5720a5e05ba0cfda8931ab80a152a
Gerrit-PatchSet: 1
Gerrit-Project: otopi
Gerrit-Branch: master
Gerrit-Owner: Alon Bar-Lev <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to