URL: https://github.com/freeipa/freeipa/pull/414
Author: lslebodn
 Title: #414: SPEC: Update SELinux file context of ipa-otpd
Action: opened

PR body:
"""
The ipa-otpd binary was moved but SELinux was not updated.
This is a workaround for developers who develop on platforms
with older SELinux policy.
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/414/head:pr414
git checkout pr414
From c41e4d7ca48d32661a9acc24a02ef7868f711705 Mon Sep 17 00:00:00 2001
From: Lukas Slebodnik <lsleb...@redhat.com>
Date: Sat, 28 Jan 2017 10:25:39 +0100
Subject: [PATCH] SPEC: Update SELinux file context of ipa-otpd

The ipa-otpd binary was moved but SELinux was not updated.
This is a workaround for developers who develop on platforms
with older SELinux policy.
---
 freeipa.spec.in | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/freeipa.spec.in b/freeipa.spec.in
index a7e05f3..b044e2f 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -243,6 +243,7 @@ Requires(pre): systemd-units
 Requires(post): systemd-units
 Requires: selinux-policy >= %{selinux_policy_version}
 Requires(post): selinux-policy-base >= %{selinux_policy_version}
+Requires(post): coreutils
 Requires: slapi-nis >= %{slapi_nis_version}
 Requires: pki-ca >= 10.3.5-6
 Requires: pki-kra >= 10.3.5-6
@@ -933,6 +934,8 @@ fi
 /bin/systemctl reload-or-try-restart dbus
 /bin/systemctl reload-or-try-restart oddjobd
 
+%post server
+chcon system_u:object_r:ipa_otpd_exec_t:s0 /usr/libexec/ipa/ipa-otpd
 
 %posttrans server
 # don't execute upgrade and restart of IPA when server is not installed
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to